I know that there's a way to filter the print output of a command and I use this regularly in the /ip route print output.
But why it doesn't work on /ip firewall nat?
For example when I try to filter out only the connections from a particular source address - it does not work, I've got empty output. I use
/ip firewall connection print where src-address=x.x.x.x
I've just got an empty output like:
Flags: S - seen reply, A - assured
# PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT

Am I missing something?

How you can use this : /ip route print output ??????

I know that there's a way to filter the print output of a command and I use this regularly in the /ip route print output.
But why it doesn't work on /ip firewall nat?
For example when I try to filter out only the connections from a particular source address - it does not work, I've got empty output. I use
/ip firewall connection print where src-address=x.x.x.x
I've just got an empty output like:
Flags: S - seen reply, A - assured
# PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT

Am I missing something?

/ip firewall connection print where src-address ~"x.x.x.x:" should work.


Matt.

I know that there's a way to filter the print output of a command and I use this regularly in the /ip route print output.
But why it doesn't work on /ip firewall nat?
For example when I try to filter out only the connections from a particular source address - it does not work, I've got empty output. I use
/ip firewall connection print where src-address=x.x.x.x
I've just got an empty output like:
Flags: S - seen reply, A - assured
# PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT

Am I missing something?

/ip firewall connection print where src-address ~"x.x.x.x:" should work.


Matt.

Thank you Matt! Kudos for that.
Where can I find more info about the matching options? I'm also struggling with the ip route print output, as I have a full IP routing table and sometimes I need to filter based on AS Path attribute. I learned how I can do that filtering with dst-address and gateway, but still I need to filter even in greater details.
Also... filtering based on few matching patterns - is that possible? Can I also have different logical operators between the matching patterns?

thx for the tip, very usefull

....
Where can I find more info about the matching options? I'm also struggling with the ip route print output, as I have a full IP routing table and sometimes I need to filter based on AS Path attribute. I learned how I can do that filtering with dst-address and gateway, but still I need to filter even in greater details.
Also... filtering based on few matching patterns - is that possible? Can I also have different logical operators between the matching patterns?

check out:
https://wiki.mikrotik.com/wiki/Manual:S ... _Operators

Ewald...