Knowledge Base

Bitte , um Beiträge und Themen zu erstellen.

Sophos XGs packet capture filter BPF

https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Diagnostics/PacketCapture/DiagnosticsPacketCaptureFilterConfigure/index.html#bpf-string-parameters

 

BPF string parameters

Object Example
Specific host host 10.10.10.1
Specific source host src host 10.10.10.1
Specific destination host dst host 10.10.10.1
Specific network net 10.10.10.0
Specific source network src net 10.10.10.0
Specific destination network dst net 10.10.10.0
Specific port port 20 or port 21
Specific source port src port 21
Specific destination port dst port 21
Specific host for the particular port host 10.10.10.1 and port 21
the specific host for all the ports except SSH host 10.10.10.1 and port not 22
Specific protocol proto ICMP, proto UDP, proto TCP