[hobbit] argh! Ports

[Galen Johnson]

Jeff Newman wrote:
> All,
>
> Quick question. I have tried every permutation I can think of but 
> basically:
>
> Every PORT example I can find has something similar to:
>
> PORT LOCAL=%[.:]22$  (etc...)
> or
> PORT LOCAL=%[.:](80|443)
>
> No example I have seen has it where you KNOW the IP and you DONT know
> the port, such as:
>
> 192.168.22.3:???????????
>
> I need the port string to match an IP with an unknown port number.
>
> If I do:
> PORT REMOTE=192.168.22.3:1234 (saying that netstat has a 1234 
> established)
> it works fine, but (again pretending on the port #'s) if a netstat had
> 3 established connections to ports 1234,1111,23521 I only get the
> 1234. I want all of them.
>
> Ive tried permutations for 2 hours now, and can't figure it out.
>
> Thanks,
> Jeff
>
> To unsubscribe from the hobbit list, send an e-mail to
> hobbit-unsubscribe at hswn.dk
>
>
Have you tried "REMOTE=%192.168.22.3:.*"?  Now, that will most likely 
get you every port on that IP...which is probably not what you 
want...it's usually easier to write it for the ports you want...or 
"EXREMOTE=%192.168.22.3:.*"...

=G=