How filter output in /ip firewall connection print

[lz1dsb]

I know that there's a way to filter the print output of a command and I use this regularly in the /ip route print output.
But why it doesn't work on /ip firewall nat?
For example when I try to filter out only the connections from a particular source address - it does not work, I've got empty output. I use
/ip firewall connection print where src-address=x.x.x.x
I've just got an empty output like:
Flags: S - seen reply, A - assured

PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT

Am I missing something?

[Kickoleg]

How you can use this : /ip route print output ???

[MrYan]

@lz1dsb

I know that there’s a way to filter the print output of a command and I use this regularly in the /ip route print output.
But why it doesn’t work on /ip firewall nat?
For example when I try to filter out only the connections from a particular source address - it does not work, I’ve got empty output. I use
/ip firewall connection print where src-address=x.x.x.x
I’ve just got an empty output like:
Flags: S - seen reply, A - assured

PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT

Am I missing something?

/ip firewall connection print where src-address ~“x.x.x.x:” should work.


Matt.

[lz1dsb]

@MrYan

@lz1dsb

I know that there’s a way to filter the print output of a command and I use this regularly in the /ip route print output.
But why it doesn’t work on /ip firewall nat?
For example when I try to filter out only the connections from a particular source address - it does not work, I’ve got empty output. I use
/ip firewall connection print where src-address=x.x.x.x
I’ve just got an empty output like:
Flags: S - seen reply, A - assured

PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT

Am I missing something?

/ip firewall connection print where src-address ~“x.x.x.x:” should work.


Matt.

Thank you Matt! Kudos for that.
Where can I find more info about the matching options? I’m also struggling with the ip route print output, as I have a full IP routing table and sometimes I need to filter based on AS Path attribute. I learned how I can do that filtering with dst-address and gateway, but still I need to filter even in greater details.
Also… filtering based on few matching patterns - is that possible? Can I also have different logical operators between the matching patterns?

[chechito]

thx for the tip, very usefull

[beamzer]

@realtime

…
Where can I find more info about the matching options? I’m also struggling with the ip route print output, as I have a full IP routing table and sometimes I need to filter based on AS Path attribute. I learned how I can do that filtering with dst-address and gateway, but still I need to filter even in greater details.
Also… filtering based on few matching patterns - is that possible? Can I also have different logical operators between the matching patterns?

check out:
https://wiki.mikrotik.com/wiki/Manual:Scripting#Other_Operators

Ewald…