Re: [pmacct-discussion] Long filters for pretag_map

[Paolo Lucente]

Hi Slava,

On Thu, Sep 24, 2009 at 10:28:16PM +0300, Slava Dubrovskiy wrote:

> Can I use long filters?
> 
> For example, for tcpdump working
> tcpdump -n src net (91.206.226.0/23 or 91.209.165.0/24) or dst net
> (91.206.226.0/23 or 91.209.165.0/24)
> 
> But for pretag.map this filter not work.

Yes, you can. If the filter works for the local tcpdump, it should
reasonably work for pmacct aswell. Are you correctly quoting it? Do
you get any specific error back or "it doesn't tag as it should"? I
verify a filter similar to the one below working fine on one of my
boxes (with a libpcap 0.9.5):

id=1 ip=X filter='src net (Y/23 or Z/24) or dst net (Y/23 or Z/24)'

Let me know.

Cheers,
Paolo



_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists