Citrix Systems 9.2 Benutzerhandbuch

TCP and UDP data takes the form of a string or a number. For expression prefixes 
that return string values for TCP and UDP data, you can apply any text-based 
operations. For more information, see 

For expression prefixes that return numeric value, such as a source port, you can 
apply an arithmetic operation. For more information, see 

The following table describes prefixes that extract TCP and UDP data.
Prefixes that Extract TCP and UDP Data

CLIENT.TCP.PAYLOAD(integer)

Returns TCP payload data as a string, starting with 
the first character in the payload and continuing for 
the number of characters in the integer argument.

You can apply any text-based operation to this 
prefix.

CLIENT.TCP.SRCPORT

Returns the ID of the current packet's source port 
as a number.

CLIENT.TCP.DSTPORT

Returns the ID of the current packet's destination 
port as a number.

CLIENT.UDP.DNS.DOMAIN

Returns the DNS domain name.

CLIENT.UDP.DNS.DOMAIN.

EQ("hostname")

Returns a Boolean TRUE if the domain name 
matches the hostname argument. The comparison 
is case insensitive.

Following is an example:

client.udp.dns.domain.eq("www.

mycompany.com")

CLIENT.UDP.DNS.IS_AAAAREC

Returns a Boolean TRUE if the record type is 
AAAA. These types of records indicate an IPv6 
address in forward lookups.

CLIENT.UDP.DNS.IS_ANYREC

Returns a Boolean TRUE if it is of any record type. 

CLIENT.UDP.DNS.IS_AREC

Returns a Boolean TRUE if the record is type A. 
Type A records provide the host address.

CLIENT.UDP.DNS.IS_CNAMEREC

Returns a Boolean TRUE if the record is of type 
CNAME. In systems that use multiple names to 
identify a resource, there is one canonical name 
and a number of aliases. The CNAME provides the 
canonical name.