in reply to Re: Regex to match a Cisco ACL
in thread Regex to match a Cisco ACL

I totally agree with you, you are right, the descriptions are not too helpful. OK, Here are some sample lines:

access-list V420_IN extended permit object-group Symantec_Service_Grou +p object-group Symantec_Clients Symantec_Servers (all 3 object groups +) access-list V420_IN extended permit object-group Symantec_Service_Grou +p 10.148.0.0 255.254.0.0 host 10.149.16.40 (One service group and tw +o network addresses) access-list V420_IN extended permit object-group Symantec_Service_Grou +p any any (Source & Destination any) access-list V420_IN extended permit tcp any any range 137 139 (with a +range of TCP ports) access-list V420_IN extended permit tcp any any eq 445 (with a single +service port)

Of course there are many more, but they are all permutations of different possibilities for the three sections I mentioned above. Hope it makes more sense now