ZyXEL Communications Security Camera 3.1 ユーザーズマニュアル

Chapter 45 Packet Flow Filter

ZyWALL (ZLD) CLI Reference Guide

The following example configures packet flow filter 1 to display how the firewall and policy routes 
handle UDP (protocol 17) traffic with source port 123 sent from IP address 1.2.3.4 to IP address 
5.6.7.8, port 456. Then it turns on the packet flow filter. 

This example displays whether or not the packet flow filter is activated and whether the ring buffer 
is enabled or disabled. 

exit

Leaves the sub-command mode.

[no] packet-flow activate

Turns the packet flow filter on or off.

show packet-flow status

Displays whether or not the packet flow filter is activated and whether the ring 
buffer is enabled or disabled.

show packet-flow buffer 

[pf_cpu_core_num]

Displays the details of the captured packet flow. 

show packet-flow filter 

Displays the specified packet flow filter’s settings.

packet-flow buffer clear 

Clears the specified CPU core’s buffer.

packet-flow buffer write

Writes buffer content (of all CPU cores) to a file you can download from the FTP /
tmp directory.

[no] packet-flow ring-buffer 

activate

Activate the packet flow ring buffer to overwrite the oldest record with the 
newest record. Use the no command to stop to capture packet after the buffer is 
full.

Packet Flow Filter Commands (continued)

Router> configure terminal

Router(coonfig)#packet-flow filter 1

Router(coonfig-packet-flow-filter 1)#source 1.2.3.4

Router(coonfig-packet-flow-filter 1)#destination 5.6.7.8

Router(coonfig-packet-flow-filter 1)#src-port 123

Router(coonfig-packet-flow-filter 1)#dst-port 456

Router(coonfig-packet-flow-filter 1)#protocol 17

Router(coonfig-packet-flow-filter 1)#enable

Router(coonfig-packet-flow-filter 1)#exit

Router(config)#packet-flow activate

Router(config)#exit

Router#

Router> show packet-flow status

Packet Flow Debugger Status:

Activation: Yes

Ring Buffer: Disabled