I've been looking at the "/ ip firewall connection" list recently and trying to search it based on src-address and dst-address.

The problem is that it seems to require that you specify a port number, so that: returns nothing.

Instead I'd have to print the whole list and specify a port number, for example: which kind of defeats the purpose.

Is there some way of giving a wildcard port number, to get a list of all connections from a specific IP address?

Thanks,
Kevin

I don't think that there are some kind of wildcards, but you can do this with simple script:

Code: Select all

:foreach i in=[/ip firewall connection find ] do={    
    :if ( [:find [/ip firewall connection get $i src-address] 192.168.0.112 ] >= 0 ) do={ 
         :put ( [/ip firewall connection get $i src-address] . " " . [/ip firewall connection get $i dst-address] );
    }
}

Thanks, I can modify that to do what I want to do.

But isn't it a bit ugly that way? It would be much nicer if the ports were separated from the IPs, for example src-port and dst-port.

Oh well, can't have everything and at least your solution works and is available now.

Thanks again,
Kevin