BIG-IP packet-filter explainer
Paste net packet-filter rules for the ordered first-match walk with the man page's own semantics, shadow detection, and the platform context every filter decision sits inside. Add a sim: line and an honest three-state simulator answers which rule matches your packet.
NetworkingRuns locally in your browser. Nothing you paste leaves this page.
Explains and simulates your own filter walk; the configuration is parsed, never executed.
API endpointGEThttps://ronutz.com/api/v1/f5-packet-filter-explainerDocumented, not served. Opens the specification.
References
- F5 TMSH Reference v17: net packet-filter (four mandatory attributes; order semantics with the worked 500/100/300/200/201 sequence; uniqueness; terminal vs continue; empty rule matches ALL; the three official examples; management interface unaffected)
- BIG-IP TMOS Routing Administration 11.6, chapter 6: Packet Filters (global Properties and Exemptions; master switch disabled by default and off-allows-all; Unhandled Packet Action; Filter Established Connections default off; ICMP reject shape; ARP and important-ICMP exemptions; incoming-only; unrelated to iRules)
- F5 TMSH Reference v16: net packet-filter-trusted (trusted traffic processes before rule list evaluation, impossible to override with a packet filter rule)
- pcap-filter(7), the tcpdump project (the BPF expression grammar the rule attribute is written in)