How to filter live log for just a specific port?

[allebone]

Hi,

I am trying to filter a specific port in live log view. I filter on this string -

:53

This shows me what I am looking for (port 53) but in addition ports that contain this string eg: :5353 also matches. Also the time in seconds at :53 also matches.

How can I modify my string to only search port 53?

Many thanks,
P

[franco]

Hi P,

You can use a full regex search: :53[^0-9]

The page will be improved eventually and the searching made easier. I think there's already a ticket for it.


Cheers,
Franco

[allebone]

Hi P,

You can use a full regex search: :53[^0-9]

The page will be improved eventually and the searching made easier. I think there's already a ticket for it.


Cheers,
Franco

Hello Franco,

Thank you, this information is excellent. I was able to get close enough to what I needed with a simple :53[^5353] so thank you for this tip. Even that alone filters out enough to make the log more manageable.
In addition I have managed to switch over completely from PFsense with all the help from the forums so while there is a learning curve in changing over, and some differences its certainly manageable for anyone if even I can do it.

Thanks again,
P

[franco]

Hi P,

Just a small note: "[]" is an atom for a single character match, "^" means invert match and 3 and 5 are the selectors... so what you wrote is actually the same as [^53] which means a single character that is not 5 or 3. It could still show other ports like :53222 :53917 etc.


Cheers,
Franco