<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE lire:global-filter-spec PUBLIC
  "-//LogReport.ORG//DTD Lire Report Specification Markup Language V1.0//EN"
  "http://www.logreport.org/LRSML/1.0/lrsml.dtd">
<lire:global-filter-spec xmlns:lire="http://www.logreport.org/LRSML/"
 superservice="firewall" id="select-to-port">

<!-- Copyright (C) 2003, 2004 Tilburg University http://www.uvt.nl/

This file is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.

This file is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
General Public License for more details.

A copy of the GNU General Public License is available online at
http://www.gnu.org/copyleft/gpl.html,.
Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111,
USA.

-->

 <lire:title>Select Destination Port</lire:title>
 <lire:description>
  <para>This filter specification can be used to select packets
   sent to a particular port on the destination host.
  </para>
 </lire:description>

<lire:param-spec>
  <lire:param name="port-range" type="string" default=".*">
   <lire:description>
    <para>This parameter contains the regular expression that will be
     used to select the packets sent to a particular port. Only
     packets sent to a port matching that regexp will be
     included in the subreports. The match is done on the ports symbolic
     name, as found by Lire::Firewall's firewall_number2names routine.
    </para>
   </lire:description>
  </lire:param>
 </lire:param-spec>

 <lire:display-spec>
  <lire:title>selected packets sent to destination port matching
   $port-range</lire:title>
 </lire:display-spec>

 <lire:filter-spec>
  <lire:match value="$to_port" re="$port-range" case-sensitive="false"/>
 </lire:filter-spec>

</lire:global-filter-spec>
