Creating Filters 223Generic Filter RulesGeneric filter rules are similar in format to protocol filter rules. Thefollowing shows the rule syntax. The following is the rule syntax: origin = /offset = /length = /mask = /value = ;Table 59 describes each field used in the rule syntax.Table 59 Generic Filter RulesFor example, a generic filter rule might look like the following:010 ACCEPT generic => origin = data/offset = 22/length = 6/mask = 0xFFFFFFFFFFFF/value = 0x0800096f39c8;Field Descriptionline # Each rule must have a unique line number (1-999). You must arrangerules in increasing order.verb This field can be one of the following:n ACCEPT —allow packet access if the condition is metn REJECT — do not allow packet access if the condition is metn AND — logically use the AND condition with condition of the nextrule to determine if packet is accepted or rejected. Both definedconditions must be met. IMPORTANT: No more than 15 consecutiveAND rules are permitted.keyword The keywords for a generic filter rule is always GENERIC.operator The operator for a generic filter rule is always: =>origin Can be either FRAME or DATAoffset This is the number of bytes offset from the origin.length This is the number of bytes to compare and mask.mask This is the bit mask, in hexadecimal format, for logical and packetcontent. (00 or FF)value This value, in hexadecimal format, is used to compare with contents ofmasked packet
