Filters Tab


Note: If you have a Pipeline 25-Fx with the IPX Routing option (for connecting to NetWare networks), see the help file for IPX Routing.


Buttons in All Windows


? (Help)

Description: Displays online help for the Java-Based Pipeline Configurator.

Usage: Click the Help button at any time to get online help for the settings in the current tab.

This opens a World Wide Browser, such as Netscape Navigator or Internet Explorer, and displays information about the settings.

To close the help display, close the browser as you would any other program. For example, in Windows 95, click the X button at the upper right of the window or choose Exit from the File menu.

With some browsers, a new window will open each time you click the Help button. If this happens, simply close each window when you're done with it.

Finding setting descriptions: At the beginning of each help window is a table of contents for the window. To go information about a particular setting, click the hyperlink (the underlined text in most browsers) for that setting in the contents. To return to the contents, use the control in your browser for going back, such as the Back button in Netscape Navigator or Internet Explorer 3.0.


Update

Description: Sends configuration settings to the Pipeline.

Usage: Click this button to send the settings shown in the Java-Based Pipeline Configurator to the Pipeline.

These new settings replace the previous settings in the Pipeline. You can use this button at any time; you do not have to enter values for all settings before updating the Pipeline.


Save As

Description: Saves configuration settings in a file.

Usage: Click this to save the settings shown in the Java-Based Pipeline Configurator in a file on your computer.

You then use your operating system's facility for specifying a name and location for the file, such as the Save To dialog box in Windows 95.

You can later open a file in which you've saved settings by clicking the Open a Configuration File button in the first window that appears when you run the Java-Based Pipeline Configurator.

You can use this button at any time; you do not have to enter values for all settings before saving settings.


Open Monitor

Description: Opens the Pipeline Monitor, a program for monitoring the status of the Pipeline unit as well as making and disconnecting ISDN connections manually. You can also use it to view the current status of the ISDN line as well as events that occur during Pipeline operation. For more information about the Pipeline Monitor, see Using the Pipeline Monitor.

Usage: Click this to open the Pipeline Monitor.


Settings


Configure

Description: This setting lets you choose what kind of filters to configure.

Usage: Choose one of the following:


Packet Filters settings


[Filter List]

Description: This display lets you choose a packet filter to configure.

Usage: Select the packet filter you want to configure and click the Edit button.

There are three predefined packet filters:

You can redefine any of these predefined filters to give it a different name or function.


Name

Description: This setting specifies the name of the filter.

Note that you can redefine this or any of the other predefined filters to give it a different function. If you do, you can give the filter a new name to reflect its new function.

Usage: Enter a name. The name can contain up to 16 characters.


Show

Description: This setting specifies which filter conditions to display.

Usage: Choose one of the following:


[Filter Condition List]

Description: This list shows input or output conditions for the filter.

Usage: Select a condition to modify from this list. The remaining settings in this window apply to this condition.


Move Up

Description: This moves the selected filter condition up one position in the list.

Usage: Select a condition and click the button.

Because conditions have numbers, not names, the number of the condition changes when you move it. Its settings, however, remain the same.

Note that if the Link to Next Filter setting for the condition is checked, it remains checked when you move a condition, and the condition becomes linked to different condition.


Move Down

Description: This moves the selected filter condition down one position in the list.

Usage: Select a condition and click the button.

Because conditions have numbers, not names, the number of the condition changes when you move it. Its settings, however, remain the same.

Note that if the Link to Next Filter setting for the condition is checked, it remains checked when you move a condition, and the condition becomes linked to different condition.


Enabled

Description: This checkbox determines whether packets are tested against the selected filter condition.

Usage: Check this box to enable the selected filter condition.


Apply To

Description: This setting determines what kinds of packets the selected filter condition applies to. The conditions that you can set for all packets are different from those for Internet Protocol (IP) packets.

Usage: Click one of these buttons:


Settings for All Packets


Filter Action

Description: This setting specifies whether the Pipeline forwards or discards packets that match the selected filter condition. When you use Filter Action in a Call Placement Filter, any forwarded data packet resets the idle timer and can initiate a call.

Usage: Choose one of the following:


Byte Offset

Description: This setting specifies the number of bytes masked from the start of the packet. The byte position specified by the Byte Offset setting is called the byte-offset.

Starting at the position specified by the Byte Offset setting, the Pipeline applies the value of the Pre-Comparison Mask setting. A mask hides the part of a number that appears behind the binary zeroes in the mask; for example, if the Pre-Comparison Mask setting is ffff0000 in hexadecimal format, the Pipeline uses only the first 16 binary digits in the comparison, since the f setting is 1111 in binary format. The Pipeline then compares the unmasked portion of the packet specified by the Comparison Length setting with the value specified by the Compare To setting.

Usage: Enter the number of starting bytes in a packet that the Pipeline ignores for comparison and masking purposes.

The default is 0. If you use the default, the Pipeline starts comparing and masking data at byte 1.

Example: Suppose you have a filter that discards packets and has these specifications:

When the 10-byte packet xycd123456 passes through the filter, the Pipeline removes the leading four bytes, because the Byte Offset setting is 4. The data 123456 remains. Next, the Pipeline removes the trailing three bytes, because the Comparison Length setting is 3; only the value 123 remains. The Pre-Comparison Mask is ffffff, which contains all ones (1s) when converted to binary numbers; therefore, the Pre-Comparison Mask value does not hide any binary digits and passes 123 through. When the Pipeline compares 123 to the setting of the Compare To setting, a match occurs and the it does not forward the packet.

Dependencies: If Link to Next Filter is checked in the previous filter, Byte Offset starts at the endpoint of the previous segment.


Comparison Length

Description: This setting indicates the number of bytes in a packet that the Pipeline compares to the setting of the Compare To setting.

The Byte Offset setting specifies the starting position; the Pipeline ignores the portion of the packet that exceeds the Comparison Length specification. In other words, the Byte Offset setting hides the leftmost bytes of data, while the Comparison Length setting hides the rightmost bytes of data.

The Pipeline applies the value of the Pre-Comparison Mask setting before comparing the bytes to the setting of the Compare To setting. The Pre-Comparison Mask value consists of the same number of bytes as the Comparison Length setting. A mask hides the part of a number that appears behind the binary zeroes in the mask; for example, if the Pre-Comparison Mask setting is ffff0000 in hexadecimal format, the Pipeline uses only the first 16 binary digits in the comparison, since the f setting is 1111 in binary format.

Usage: Enter the number of bytes to use for comparison. You can enter a number between 0 and 8.

The default value is 0. When you accept the default, Pipeline uses no bytes for comparison; all packets match the filter.

Example: Suppose you have a filter that discards packets and has these specifications:

When the 10-byte packet xycd123456 passes through the filter, the Pipeline removes the leading four bytes, because the Byte Offset setting is 4. The data 123456 remains. Next, the Pipeline removes the trailing three bytes, because the Comparison Length setting is 3; only the value 123 remains. The Pre-Comparison Mask is ffffff, which contains all ones (1s) when converted to binary numbers; therefore, the Pre-Comparison Mask value does not hide any binary digits and passes 123 through. When the Pipeline compares 123 to the setting of the Compare To setting, a match occurs and the Pipeline does not forward the packet.


Pre-Comparison Mask

Description: This setting specifies a 16-bit hexadecimal bitmask that the Pipeline applies to the data contained in the specified bytes in a packet. A mask hides the part of a number that appears behind the binary zeroes in the mask; for example, if the Pre-Comparison Mask setting is ffff0000, the Pipeline uses only the first 16 binary digits in the comparison, since the f setting is 1111 in binary format.

The Pipeline applies the Pre-Comparison Mask setting starting at the position specified by the Byte Offset setting. The setting you specify for Pre-Comparison Mask must contain the same number of bytes as the Comparison Length setting. The Pipeline then compares the unmasked portion of the packet with the value specified by the Compare To setting.

Usage: Enter a hexadecimal number. You can enter a number between 00000000000000 and ffffffffffffffff.

The default is 00000000000000. When you use the default, the Pipeline uses the data in the packet as is for comparison purposes.

Example: This example specifies that the Pipeline masks all but the first 24 bits of the data:


Compare To

Description: This setting specifies a 16-bit hexadecimal value to compare against the data contained within the specified bytes in a packet. You specify the bytes using the Comparison Length, Byte Offset, and Pre-Comparison Mask settings.

Usage: Enter a hexadecimal number. You can enter a number from 00000000000000 to ffffffffffffffff.

The default is 00000000000000. When you use the default, the bytes must contain nothing to match the filter.

Example: e0e0030000000000

Dependencies: Keep this additional information in mind:


Filter If Packets Are

Description: This setting specifies how a packet's contents are compared to the value specified in the filter condition.

After applying the Byte Offset, Pre-Comparison Mask, and Comparison Length values to reach the appropriate location in a packet, the Pipeline compares the packet's contents to the Compare To setting. If Filter If Packets Are is set to Equal (the default), the Pipeline applies the filter if the packet data is identical to the setting of the Compare To setting. If Filter If Packets Are is set to Not Equal, the Pipeline applies the filter if the packet data is not identical to the setting of the Compare To setting.

Usage: Choose one of the following:


Link to Next Filter

Description: This setting specifies whether the Pipeline passes the packet to the next filter condition.

Use this setting when you need a filter for all packets that is wider than the 8-byte limit of the Comparison Length setting. For example, suppose a packet is 16 bytes long (128 bits). You can compare only 8 bytes in a filter because the maximum value of the Comparison Length setting is 8. To compare all 16 bytes, you specify two 8-byte filters linked by the Link to Next Filter setting.

Usage:

Example: Input Filter #1 and Input Filter #2 examine different bytes of the same packet and apply a logical AND to the results in order to determine whether the packet matches the specification:

In this example, the Pipeline compares 16 bytes of each data packet. The match occurs only if all the noncontiguous bytes contain the specified values.

Dependencies: The next filter must be a filter condition for all packets (Apply To is All Packets) and must be activated (Enabled setting is checked); otherwise, the Pipeline ignores the filter condition.


Settings for IP Packets


Filter Action

Description: This setting specifies whether the Pipeline forwards or discards packets that match the selected filter condition. When you use Filter Action in a Call Placement Filter, any forwarded data packet resets the idle timer and can initiate a call.

Usage: Choose one of the following:

  • Discard
  • Forward

    Source Mask

    Description: This setting specifies the bits that the Pipeline should mask when comparing a packet's source address to the value of the Source Address setting. The masked part of an address is hidden; the Pipeline does not use it for comparisons with Source Address. A mask hides the part of a number that appears behind each binary 0 (zero) in the mask; the Pipeline uses only the part of a number that appears behind each binary 1 for comparison.

    The Pipeline applies the mask to the address using a logical AND after the mask and address are both translated into binary format.

    Usage: Enter the IP mask in dotted decimal format. The value 0 (zero) hides all bits, because the decimal value 0 is the binary value 00000000; the value 255 does not mask any bits, because the decimal value 255 is the binary value 11111111.

    The null address 0.0.0.0 is the default; this setting indicates that the Pipeline masks all bits. To specify a single source address, set Source Mask to 255.255.255.255 and set Source Address to the IP address that the Pipeline uses for comparison.

    Example: Suppose a packet has the source address 10.2.1.1. If the Source Address setting is 10.2.1.3 and the Dest. Mask setting is 255.255.255.0, the Pipeline masks the last digit and uses only 10.2.1, which matches the packet.


    Source Address

    Description: This setting specifies the source address to which the Pipeline compares a packet's source address.

    Usage: Enter the source address the Pipeline should use for comparison when filtering a packet. The address consists of four numbers between 0 and 255, separated by periods.

    The null address 0.0.0.0 is the default; this setting matches all packets.

    Example: 200.62.201.56


    Dest. Mask

    Description: This setting specifies the bits that the Pipeline should mask when comparing a packet's destination address to the value of the Dest. Address setting. The masked part of an address is hidden; the Pipeline does not use it for comparison with Dest. Address. A mask hides the part of a number that appears behind each binary 0 (zero) in the mask; the Pipeline uses only the part of a number that appears behind each binary 1 for comparison.

    The Pipeline applies the mask to the address using a logical AND after the mask and address are both translated into binary format.

    Usage: Enter the IP mask in dotted decimal format. The value 0 (zero) hides all bits, because the decimal value 0 is the binary value 00000000; the value 255 does not mask any bits, because the decimal value 255 is the binary value 11111111.

    The null address 0.0.0.0 is the default; this setting indicates that the Pipeline masks all bits. To specify a single destination address, set Dest. Mask to 255.255.255.255 and set Dest. Address to the IP address that the Pipeline uses for comparison.

    Example: Suppose a packet has the destination address 10.2.1.1. If the Dest. Address setting is 10.2.1.3 and the Dest. Mask setting is 255.255.255.0, the Pipeline masks the last digit and uses only 10.2.1, which matches the packet.


    Dest. Address

    Description: This setting specifies the destination address to which the Pipeline compares a packet's destination address.

    Usage: Enter the destination address the Pipeline should use for comparison when filtering a packet. The address consists of four numbers between 0 and 255, separated by periods.

    The null address 0.0.0.0 is the default. If you accept the default, the Pipeline does not use the destination address as a filtering criterion.

    Example: 200.62.201.56


    Source Comparison

    Description: This setting specifies the type of comparison the Pipeline makes when filtering for source port numbers using the Source Port # setting.

    Usage: Choose one of the following:

    Dependencies: This setting works only for TCP and UDP packets.

    You must set Source Comparison to None if the Protocol # setting is not set to 6 (TCP) or 17 (UDP).


    Source Port #

    Description: This setting specifies the source port number to which the Pipeline compares the packet's source port number.

    The Source Comparison criterion determines how the Pipeline carries out the comparison.

    Usage: Enter the number of the source port the Pipeline should use for comparison when filtering packets. You can enter a number between 0 and 65535.

    The default setting is 0 (zero); this setting means that the Pipeline forwards all packets.

    Example: 25

    Port 25 is reserved for SMTP, so that socket is dedicated to receiving mail messages. Port 20 is reserved for FTP data messages, Port 21 for FTP control sessions, and Port 23 for Telnet sessions.


    Dest. Comparison

    Description: This setting specifies the type of comparison the Pipeline makes when using the Dest. Port # setting.

    Usage: Choose one of the following:

    Dependencies: This setting works only for TCP and UDP packets.

    You must set Dest. Comparison to None if the Protocol # setting is not set to 6 (TCP) or 17 (UDP).


    Dest. Port #

    Description: This setting specifies the destination port number to which the Pipeline compares the packet's destination port number. The destination port number specifies the port on the remote device that must be "listening" for packets.

    The Dest. Comparison criterion determines how the Pipeline carries out the comparison.

    Usage: Enter the number of the destination port the Pipeline should use for comparison when filtering packets. You can enter a number between 0 and 65535.

    The default setting is 0 (zero). If you accept the default, the Pipeline does not use the destination port number as a filtering criterion.

    Example: 25

    Port 25 is reserved for SMTP; that socket is dedicated to receiving mail messages. Port 20 is reserved for FTP data messages, Port 21 for FTP control sessions, and Port 23 for Telnet sessions.


    Protocol #

    Description: This setting specifies the protocol number to which the Pipeline compares a packet's protocol number.

    Usage: Enter the number of the protocol. You can enter a number between 0 and 255. The default setting is 0 (zero). When you accept the default, the Pipeline disregards the Protocol # setting when applying the filter.

    Protocols and their associated numbers are listed in the following table.

    Number Name
    1 ICMP (Internet Control Message Protocol)
    2 IGMP (Internet Group Management Protocol)
    3 GGP (Gateway-to-Gateway Protocol)
    4 IP (Internet Protocol)
    5 ST (Stream)
    6 TCP (Transmission Control Protocol)
    7 UCL
    8 EGP (Exterior Gateway Protocol)
    9 Any private interior gateway protocol
    10 BBN-RCC-MON (BBN RCC Monitoring)
    11 NVP-II (Network Voice Protocol II)
    12 PUP
    13 ARGUS
    14 EMCOM
    15 XNET (Cross-Net Debugger)
    16 CHAOS
    17 UDP (User Datagram Protocol)
    18 MUX (Multiplexing)
    19 DCN-MEAS (DCN Measurement Subsystems)
    20 HMP (Host Monitoring Protocol)
    21 PRM (Packet Radio Measurement)
    22 XNS IDP (Xerox Networking System Internetwork Datagram Protocol)
    23 TRUNK-1
    24 TRUNK-2
    25 LEAF-1
    26 LEAF-2
    27 RDP (Reliable Data Protocol)
    28 IRTP (Internet Reliable Transport Protocol)
    29 ISO-TP4 (International Standards Organization Transport Protocol Class 4)
    30 NETBLT (Bulk Data Transfer Protocol)
    31 MFE-NSP (MFE Network Services Protocol)
    32 MERIT-INP (MERIT Internodal Protocol)
    33 SEP (Sequential Exchange Protocol)
    34 3PC (Third Party Connect Protocol)
    35 IDPR (Inter-Domain Policy Routing Protocol)
    36 XTP
    37 DDP (Datagram Delivery Protocol)
    38 IDPR-CMTP (IDPR Control Message Transport Protocol)
    39 TP++ (TP++ Transport Protocol)
    40 IL (IL Transport Protocol)
    41 SIP (Simple Internet Protocol)
    42 SDRP (Source Demand Routing Protocol)
    43 SIP-SR (SIP Source Route)
    44 SIP-FRAG (SIP Fragment)
    45 IDRP (Inter-Domain Routing Protocol)
    46 RSVP (Reservation Protocol)
    47 GRE (General Routing Encapsulation)
    48 MHRP (Mobile Host Routing Protocol)
    49 BNA
    50 SIPP-ESP (SIPP Encap Security Payload)
    51 SIPP-AH (SIPP Authentication Header)
    52 I-NLSP (Integrated Net Layer Security Protocol)
    53 SWIPE (IP with Encryption)
    54 NHRP (Next Hop Resolution Protocol)
    55-60 Unassigned
    61 Any Host Internet Protocol
    62 CFTP
    63 Any local network
    64 SAT-EXPAK (SATNET and Backroom EXPAK)
    65 KRYPTOLAN
    66 RVD (MIT Remote Virtual Disk Protocol)
    67 IPPC (Internet Pluribus Packet Core)
    68 Any distributed file system
    69 SAT-MON (SATNET Monitoring)
    70 VISA (VISA Protocol)
    71 IPCU (Internet Packet Core Utility)
    72 CPNX (Computer Protocol Network Executive)
    73 CPHB (Computer Protocol Heart Beat)
    74 WSN (Wang Span Network)
    75 PVP (Packet Video Protocol)
    76 BR-SAT-MON (Backroom SATNET Monitoring)
    77 SUN-ND PROTOCOL-Temporary
    78 WB-MON (WIDEBAND Monitoring)
    79 WB-EXPAK (WIDEBAND EXPAK)
    80 ISO-IP (International Standards Organization Internet Protocol)
    81 VMTP
    82 SECURE-VMTP
    83 VINES
    84 TTP
    85 NSFNET-IGP (National Science Foundation Network Interior Gateway Protocol)
    86 DGP (Dissimilar Gateway Protocol)
    87 TCF
    88 IGRP
    89 OSPF (Open Shortest Path First)
    90 Sprite-RPC
    91 LARP (Locus Address Resolution Protocol)
    92 MTP (Multicast Transport Protocol)
    93 AX.25 (AX.25 Frames)
    94 IPIP (IP-within-IP Encapsulation Protocol)
    95 MICP (Mobile Internetworking Control Protocol)
    96 SCC-IP (Semaphore Communications Security Protocol)
    97 ETHERIP (Ethernet-within-IP Encapsulation)
    98 ENCAP (Encapsulation Header)
    99 Any private encryption scheme
    100 GMTP
    101-254 Unassigned
    255 Reserved

    Dependencies: The Protocol # setting applies only if the filter is of type IP (Apply to: All Packets/IP Packets setting is IP) and is activated (Enabled setting is checked).


    Match Only Established TCP Connections

    Description: This checkbox specifies whether the filter should match only established TCP connections.

    An established TCP connection is one in which the TCP session has already sent its first packet. A not established TCP connection is one in which the TCP session has not sent its first packet. Specifically, the first packet is the "connection request" packet which has SYN bit set to 1, while both the ACK and RST bits are set to 0.

    Usage:

    Dependencies: The Match only established TCP Connections setting does not apply (Match Only Established TCP Connections setting is dimmed) if the Protocol # setting is set to any value other than 6 (TCP).