Fra: Johannes Lavre
Sendt: 3. desember 2012 09:37
Til: 'Poison Arrow'
Emne: SV: [Nfsen-discuss] How to using filters (profiles)

Think you should use an ore delimiter here, it will never catch any flows if 
the filter must include more than one source or destination.
I think what you want is

Out-to-cn
Src net 192.168.1.0/24 and ( dst net 68.30.13.0/20 or dst net 1.2.3.4/24 )

Out-to-world
Src net 192.168.1.0/24 and not (net 68.30.13.0/20 or net 154.23.95/22)

Fra: Poison Arrow 
[mailto:joison...@gmail.com]<mailto:[mailto:joison...@gmail.com]>
Sendt: 1. desember 2012 21:35
Til: 
nfsen-discuss@lists.sourceforge.net<mailto:nfsen-discuss@lists.sourceforge.net>
Emne: [Nfsen-discuss] How to using filters (profiles)

How do I properly write my own filters in channels?
Our internal subnet address (for example) - 
192.168.1.0/24<http://192.168.1.0/24>
I have a list of more than 100 subnets (city network, CN), and I need to split 
them to two directions and types: inbound/outbound and including/excluding 
these ranges ?
Before write this message, I tried few combinations, such as:
----- Out-to-CN
src net 192.168.1.0/24<http://192.168.1.0/24>
and (dst net 68.30.13.0/20<http://68.30.13.0/20>)
and (dst net ...
---- Only-CN
src and dst net 192.168.1.0/24<http://192.168.1.0/24>
and net 154.23.95/22
...
---- Out-to-world
src net 192.168.1.0/24<http://192.168.1.0/24>
and not net 68.30.13.0/20<http://68.30.13.0/20>
and (not net 154.23.95/22
...
!(net 154.23.95/22)

for all written above nfsen do not say 'syntax error', but after hours I can't 
see any graphs for all created channels, although I see all of them in 
'Statistics timeslot' table.

Thank you in advance for your reply.
________________________________
No virus found in this message.
Checked by AVG - www.avg.com<http://www.avg.com>
Version: 2012.0.2221 / Virus Database: 2634/5432 - Release Date: 12/02/12
------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
BUILD Helping you discover the best ways to construct your parallel projects.
http://goparallel.sourceforge.net
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to