[breakdan]

I may have written just a bit cryptic :)

I'll explain again
accept [9:1] = 1;

see bold number...value can be: 1(byte), 2(word),4(dword) and, for ex, if i hava to filter icmp expression would be
accept [9:1]=1;
filter on ports: accept [20:2,b]=80;

i'm not able to understand meaning of :1, :2, :4.....

THK a lot

Daniel