Each filter entry can contain entries of the form (Ss-Se, Gs-Ge) or (*, Gs-Ge) or (Ss-Se, *) or (*,*), where 'S' refers to a multicast source address, 'G' refers to a multicast group address, 's' refers to start address and 'e' refers to end address. Group and source addresses are maintained as a range or wildcard or specific values. The filter mode specifies the packet for which this configuration needs to be enforced. This can be 'include' or 'exclude' or 'any'. 'Any' implies both 'include' and 'exclude'. Hence for a specific group and source range, only one mode is possible.