# tcp dport 22 iiftype ether ether saddr 00:0f:54:0c:11:4 accept [ { "match": { "left": { "payload": { "field": "dport", "name": "tcp" } }, "right": 22 } }, { "match": { "left": { "meta": "iiftype" }, "right": "ether" } }, { "match": { "left": { "payload": { "field": "saddr", "name": "ether" } }, "right": "00:0f:54:0c:11:04" } }, { "accept": null } ] # tcp dport 22 ether saddr 00:0f:54:0c:11:04 accept [ { "match": { "left": { "payload": { "field": "dport", "name": "tcp" } }, "right": 22 } }, { "match": { "left": { "payload": { "field": "saddr", "name": "ether" } }, "right": "00:0f:54:0c:11:04" } }, { "accept": null } ] # ether saddr 00:0f:54:0c:11:04 accept [ { "match": { "left": { "payload": { "field": "saddr", "name": "ether" } }, "right": "00:0f:54:0c:11:04" } }, { "accept": null } ]