Skip to content

Add Mikrotik ip firewall connection print terse without-paging #2232

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Add Mikrotik ip firewall connection print terse without-paging #2232

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
97cc699
New template for Mikrotik RouterOS: `/ip firewall connection print te…
evilmonkey19 Nov 4, 2025
477b6e5
Added new flags and augmented tests
evilmonkey19 Nov 4, 2025
02bca3e
Done change suggested by @mjbear
evilmonkey19 Nov 11, 2025
e2ff539
Reduce extra parens for optional status codes
mjbear Nov 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions ntc_templates/templates/index
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -838,6 +838,7 @@ linux_arp_-a.textfsm, .*, linux, arp -a
linux_vzlist.textfsm, .*, linux, vzlist
linux_top.textfsm, .*, linux, top

mikrotik_routeros_ip_firewall_connection_print_terse_without-paging.textfsm, .*, mikrotik_routeros, [[/]]ip firewall con[[nection]] p[[rint]] t[[erse]] wi[[thout-paging]]
mikrotik_routeros_interface_bridge_host_print_terse_without-paging.textfsm, .*, mikrotik_routeros, [[/]]in[[terface]] b[[ridge]] h[[ost]] p[[rint]] t[[erse]] wi[[thout-paging]]
mikrotik_routeros_ip_hotspot_ip-binding_print_terse_without-paging.textfsm, .*, mikrotik_routeros, [[/]]ip h[[otspot]] ip-b[[inding]] p[[rint]] t[[erse]] wi[[thout-paging]]
mikrotik_routeros_routing_ospf_neighbor_print_terse_without-paging.textfsm, .*, mikrotik_routeros, [[/]]r[[outing]] o[[spf]] nei[[ghbor]] p[[rint]] t[[erse]] wi[[thout-paging]]
Expand Down
40 changes: 40 additions & 0 deletions ...tes/templates/mikrotik_routeros_ip_firewall_connection_print_terse_without-paging.textfsm
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
Value INDEX (\d+)
Value EXPECTED (E)
Value SEEN_REPLY (S)
Value ASSURED (A)
Value CONFIRMED (C)
Value DYING (D)
Value FASTTRACK (F)
Value HARDWARE_OFFLOAD (H)
Value SOURCE_NAT (s)
Value DESTINATION_NAT (d)
Value PROTOCOL (\w+)
Value SOURCE_ADDRESS (\S+)
Value SOURCE_PORT (\S+)
Value DESTINATION_ADDRESS (\S+)
Value DESTINATION_PORT (\S+)
Value REPLY_SOURCE_ADDRESS (\S+)
Value REPLY_SOURCE_PORT (\S+)
Value REPLY_DESTINATION_ADDRESS (\S+)
Value REPLY_DESTINATION_PORT (\S+)
Value TCP_STATE (\S+)
Value ICMP_TYPE (\d+)
Value ICMP_CODE (\d+)
Value ICMP_ID (\d+)
Value TIMEOUT (\S+)
Value ORIGIN_PACKETS (\d.+\d|\d+)
Value ORIGIN_BYTES (\d.+\d|\d+)
Value ORIGIN_FASTTRACK_PACKETS (\d.+\d|\d+)
Value ORIGIN_FASTTRACK_BYTES (\d.+\d|\d+)
Value REPLY_PACKETS (\d.+\d|\d+)
Value REPLY_BYTES (\d.+\d|\d+)
Value REPLY_FASTTRACK_PACKETS (\d.+\d|\d+)
Value REPLY_FASTTRACK_BYTES (\d.+\d|\d+)
Value ORIGIN_RATE (\S+)
Value REPLY_RATE (\S+)

Start
# Copy flags for new lines: ${EXPECTED}\s*${SEEN_REPLY}\s*${ASSURED}\s*${CONFIRMED}\s*${DYING}\s*${FASTTRACK}\s*${HARDWARE_OFFLOAD}\s*${SOURCE_NAT}\s*${DESTINATION_NAT}
^\s*${INDEX}\s*${EXPECTED}?\s*${SEEN_REPLY}?\s*${ASSURED}?\s*${CONFIRMED}?\s*${DYING}?\s*${FASTTRACK}?\s*${HARDWARE_OFFLOAD}?\s*${SOURCE_NAT}?\s*${DESTINATION_NAT}?\s*protocol=${PROTOCOL}\s*src-address=${SOURCE_ADDRESS}\s*src-port=${SOURCE_PORT}\s*dst-address=${DESTINATION_ADDRESS}\s*dst-port=${DESTINATION_PORT}\s*reply-src-address=${REPLY_SOURCE_ADDRESS}\s*reply-src-port=${REPLY_SOURCE_PORT}\s*reply-dst-address=${REPLY_DESTINATION_ADDRESS}\s*reply-dst-port=${REPLY_DESTINATION_PORT}\s*tcp-state=${TCP_STATE}\s*timeout=${TIMEOUT}\s*orig-packets=${ORIGIN_PACKETS}\s*orig-bytes=${ORIGIN_BYTES}\s*orig-fasttrack-packets=${ORIGIN_FASTTRACK_PACKETS}\s*orig-fasttrack-bytes=${ORIGIN_FASTTRACK_BYTES}\s*repl-packets=${REPLY_PACKETS}\s*repl-bytes=${REPLY_BYTES}\s*repl-fasttrack-packets=${REPLY_FASTTRACK_PACKETS}\s*repl-fasttrack-bytes=${REPLY_FASTTRACK_BYTES}\s*orig-rate=${ORIGIN_RATE}\s*repl-rate=${REPLY_RATE}\s*$$ -> Record
^\s*${INDEX}\s*${EXPECTED}?\s*${SEEN_REPLY}?\s*${ASSURED}?\s*${CONFIRMED}?\s*${DYING}?\s*${FASTTRACK}?\s*${HARDWARE_OFFLOAD}?\s*${SOURCE_NAT}?\s*${DESTINATION_NAT}?\s*protocol=${PROTOCOL}\s*src-address=${SOURCE_ADDRESS}\s*dst-address=${DESTINATION_ADDRESS}\s*reply-src-address=${REPLY_SOURCE_ADDRESS}\s*reply-dst-address=${REPLY_DESTINATION_ADDRESS}\s*icmp-type=${ICMP_TYPE}\s*icmp-code=${ICMP_CODE}\s*icmp-id=${ICMP_ID}\s*timeout=${TIMEOUT}\s*orig-packets=${ORIGIN_PACKETS}\s*orig-bytes=${ORIGIN_BYTES}\s*orig-fasttrack-packets=${ORIGIN_FASTTRACK_PACKETS}\s*orig-fasttrack-bytes=${ORIGIN_FASTTRACK_BYTES}\s*repl-packets=${REPLY_PACKETS}\s*repl-bytes=${REPLY_BYTES}\s*repl-fasttrack-packets=${REPLY_FASTTRACK_PACKETS}\s*repl-fasttrack-bytes=${REPLY_FASTTRACK_BYTES}\s*orig-rate=${ORIGIN_RATE}\s*repl-rate=${REPLY_RATE}\s*$$ -> Record
^. -> Error
2 changes: 2 additions & 0 deletions ...se_without-paging/mikrotik_routeros_ip_firewall_connection_print_terse_without-paging.raw
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
0 SAC protocol=tcp src-address=172.31.255.29 src-port=56454 dst-address=172.31.255.30 dst-port=22 reply-src-address=172.31.255.30 reply-src-port=22 reply-dst-address=172.31.255.29 reply-dst-port=56454 tcp-state=established timeout=23h59m52s orig-packets=520 orig-bytes=47 603 orig-fasttrack-packets=0 orig-fasttrack-bytes=0 repl-packets=363 repl-bytes=53 460 repl-fasttrack-packets=0 repl-fasttrack-bytes=0 orig-rate=1760bps repl-rate=6.4kbps
1 S Cs protocol=icmp src-address=192.168.80.254 dst-address=216.58.215.142 reply-src-address=216.58.215.142 reply-dst-address=172.31.255.30 icmp-type=8 icmp-code=0 icmp-id=69 timeout=9s orig-packets=7 269 orig-bytes=610 596 orig-fasttrack-packets=0 orig-fasttrack-bytes=0 repl-packets=7 269 repl-bytes=610 596 repl-fasttrack-packets=0 repl-fasttrack-bytes=0 orig-rate=1344bps repl-rate=1344bps
70 changes: 70 additions & 0 deletions ...se_without-paging/mikrotik_routeros_ip_firewall_connection_print_terse_without-paging.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,70 @@
---
parsed_sample:
- assured: "A"
confirmed: "C"
destination_address: "172.31.255.30"
destination_nat: ""
destination_port: "22"
dying: ""
expected: ""
fasttrack: ""
hardware_offload: ""
icmp_code: ""
icmp_id: ""
icmp_type: ""
index: "0"
origin_bytes: "47 603"
origin_fasttrack_bytes: "0"
origin_fasttrack_packets: "0"
origin_packets: "520"
origin_rate: "1760bps"
protocol: "tcp"
reply_bytes: "53 460"
reply_destination_address: "172.31.255.29"
reply_destination_port: "56454"
reply_fasttrack_bytes: "0"
reply_fasttrack_packets: "0"
reply_packets: "363"
reply_rate: "6.4kbps"
reply_source_address: "172.31.255.30"
reply_source_port: "22"
seen_reply: "S"
source_address: "172.31.255.29"
source_nat: ""
source_port: "56454"
tcp_state: "established"
timeout: "23h59m52s"
- assured: ""
confirmed: "C"
destination_address: "216.58.215.142"
destination_nat: ""
destination_port: ""
dying: ""
expected: ""
fasttrack: ""
hardware_offload: ""
icmp_code: "0"
icmp_id: "69"
icmp_type: "8"
index: "1"
origin_bytes: "610 596"
origin_fasttrack_bytes: "0"
origin_fasttrack_packets: "0"
origin_packets: "7 269"
origin_rate: "1344bps"
protocol: "icmp"
reply_bytes: "610 596"
reply_destination_address: "172.31.255.30"
reply_destination_port: ""
reply_fasttrack_bytes: "0"
reply_fasttrack_packets: "0"
reply_packets: "7 269"
reply_rate: "1344bps"
reply_source_address: "216.58.215.142"
reply_source_port: ""
seen_reply: "S"
source_address: "192.168.80.254"
source_nat: "s"
source_port: ""
tcp_state: ""
timeout: "9s"