MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0xf0
OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
  4
.ip.ver			 4
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  1
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0x0f
.ip.hlen       5
.ip.tos         0
 
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  1
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0x10
OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
  4
.delay  0
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  1
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0x8
OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
  3
.throughput  0
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  1
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0x4
OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
  2
.reliability  0
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  1
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0x2
OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
  1
.cost  2
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  1
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0xe0
OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
  5
.priority 0
.ip.len     	 20s2.
ip.len     	    IPlen      
.ip.id          0s2.
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0x1fff
.ip.OFFSET   PARAMETERS: <number of bites>
 
The position of the next defined field will be shifted to the left for the given <number of bits> which must be from 1 to 7. So every written value will be shifter to the left before writing. Nevertheless, after the writing the left bits will be also changed and set to 0. To avoid this use command 
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
. See "headers/tcp_header.fws"
 
       0s2.
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  2
MASK   PARAMETERS: <field's mask>
 
Defines the mask for the next defined field. Mask is hexadecimal number. Value for field will be written only in bits corresponding not null bits of mask. See "headers/tcp_header.fws".
  0xe0
.ip.flags       0x00
PASS   PARAMETERS: <number of bytes>
 
Increases the byte pointer for the given <number of bytes>.
  1
.ip.ttl         255s1.
.ip.proto       0x00
.ip.crc         0x0000
ip.crc          IPcrc      
.srcip          192.168.0.1   
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  4
.srcip1          192.
.srcip2          168.
.srcip3          0.
.srcip4          1.
.dstip          192.168.0.3
BACK   PARAMETERS: <number of bytes>
 
Reduces the pointer for the given <number of bytes>.
  4
.dstip1         192
.dstip2         168
.dstip3         0
.dstip4         3
DEFINE   PARAMETERS: <name> <value>
 
Defines the substitution which will be applied while reading some values (in parameters to commands and others). <name> will be replaced by <value>. This substitution may be also performed in strings enclosed in apostrophes. In this case the <name> must be enclosed in $ (ex: 'value = $name$'. See also command 
GDEF   PARAMETERS: <new name> <original name>
 
Defines the substitution which will be applied while reading almost any read word from text. <New name> will be replaced by <original name>. This substitution may be also performed in strings enclosed in apostrophes. In this case the name must be enclosed in $ (ex: 'value = $name$').
.
 
  tcp  0x06
DEFINE   PARAMETERS: <name> <value>
 
Defines the substitution which will be applied while reading some values (in parameters to commands and others). <name> will be replaced by <value>. This substitution may be also performed in strings enclosed in apostrophes. In this case the <name> must be enclosed in $ (ex: 'value = $name$'. See also command 
GDEF   PARAMETERS: <new name> <original name>
 
Defines the substitution which will be applied while reading almost any read word from text. <New name> will be replaced by <original name>. This substitution may be also performed in strings enclosed in apostrophes. In this case the name must be enclosed in $ (ex: 'value = $name$').
.
 
  udp  0x11
DEFINE   PARAMETERS: <name> <value>
 
Defines the substitution which will be applied while reading some values (in parameters to commands and others). <name> will be replaced by <value>. This substitution may be also performed in strings enclosed in apostrophes. In this case the <name> must be enclosed in $ (ex: 'value = $name$'. See also command 
GDEF   PARAMETERS: <new name> <original name>
 
Defines the substitution which will be applied while reading almost any read word from text. <New name> will be replaced by <original name>. This substitution may be also performed in strings enclosed in apostrophes. In this case the name must be enclosed in $ (ex: 'value = $name$').
.
 
  icmp 0x01
DEFINE   PARAMETERS: <name> <value>
 
Defines the substitution which will be applied while reading some values (in parameters to commands and others). <name> will be replaced by <value>. This substitution may be also performed in strings enclosed in apostrophes. In this case the <name> must be enclosed in $ (ex: 'value = $name$'. See also command 
GDEF   PARAMETERS: <new name> <original name>
 
Defines the substitution which will be applied while reading almost any read word from text. <New name> will be replaced by <original name>. This substitution may be also performed in strings enclosed in apostrophes. In this case the name must be enclosed in $ (ex: 'value = $name$').
.
 
  ospf 0x59