pmacct-discussion  

Re: [pmacct-discussion] aggregate_filter and tcpdump portrange

enrico lambertini
Tue, 08 Apr 2008 13:21:55 -0700

Hi,
thaks a lot for your answer, the trouble was in the old version of the package 
of debian.
I downloaded tle latest version from cvs, compiled from source and now works 
great :-)
thanks

bye,
enrico

> Hi Enrico,
>
> sorry for the late reply. Keywords supported by the "aggregate_filter"
> directive highly depend on the grammar of the libpcap library pmacct
> is compiled against. If you have a tcpdump compiled against the same
> libpcap library, test its behaviour attaching the same filter, ie.:
>
> tcpdump src host 192.168.1.39 and dst portrange 79-81
>
> It should not recognize the "portrange" keyword aswell. If that's the
> case, all you need is to download a more recent version of the library
> and recompile pmacct against it.
>
> Cheers,
> Paolo


_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists