Is it possible to do a port range serach

  • 1
  • Question
  • Updated 5 years ago
  • Answered
How can I do a search for any ips where the source port is say 12000-13500 or the destination port is 4500-8000.
Photo of Network Admin

Network Admin

  • 32 Posts
  • 1 Reply Like

Posted 5 years ago

  • 1
Photo of Darragh Delaney

Darragh Delaney, Employee

  • 58 Posts
  • 5 Reply Likes
Insert the syntax
dport>4500 & dport12000 & sport5000 & dport<5020 & {senid#senid#Sensor#sensor#} & {src#src#Source IP/Subnet#subnet#} & {dst#dst#Destination IP/Subnet#subnet#} & {src,dst#ip#Client or Server#subnetdl#} & {proto#proto#IP Protocol#protocol#} & {sport#sport#Src Port#port#} & {dport#dport#Destination Port#service#} & {tos#tos#TOS#tos#}