NTPL Filter Examples

Installation and Use of Napatech Link™ Capture Software for Intel® PAC with Intel® Arria® 10 GX FPGA

Intel® PAC
Content Type
Quick Guide

Use these examples to add hardware-accelerated filtering on ports, IP addresses, protocols and errored packets.

Adding NTPL filter expressions

Refer to Adding an NTPL Expression for instructions on how to add NTPL expressions to the configuration.

Filter on ports

Filter on a port, use mTcpDestPort for TCP destination port and mTcpSrcPort for TCP source port:

Assign[StreamId=0] = (Port == 0) AND (mTcpDestPort==8080)

Filter on several ports:

Assign[StreamId=0] = (Port == 0) AND (mTcpDestPort == 8080, 8081, 8089)

Filter on a range of ports:

Assign[StreamId=0] = (Port == 0) AND (mTcpSrcPort == (0x100..0x400))

Filtering on UDP ports can be done in the same way.

Filter on IP addresses

Filter on an IP address, use mIPv4SrcAddrIP for IPv4 source address and mIPv4DestAddrIP for IPv4 destination address:

Assign[StreamId=0] = (Port == 0) AND (mIPv4SrcAddrIP == [])

Filter on an IP range of addresses ( –

Assign[StreamId=0] = (Port == 0) AND (mIPv4SrcAddrIP == ([]..[]))

Filter on an IP subnet (all addresses from to using a bit mask):

Assign[StreamId=0] = (Port == 0) AND (mIPv4DestAddrIP == {[FF.FF.FF.00]:[]})

Filter on protocols

Filter on a protocol:

Assign[StreamId=0] = (Port == 0) AND (layer3protocol == IPv4)

Filter on several protocols:

Assign[StreamId=0] = (Port == 0 ) AND (Layer4Protocol == UDP, TCP, ICMP)

Filter on errored packets

Look for errored packets:

Assign[StreamId=0] = (CrcError == TRUE OR (IpChecksumError == TRUE OR (UdpChecksumError == TRUE OR TcpChecksumError == TRUE)))