I see what you mean but here is the man page for the flow- filter: (it says it may not work, but I was wondering if there was a workaround for it?)
flow-filter Name flow-filter -- Filter flows. Synopsis flow-filter [-hko] [-a src_as_filter] [-A dst_as_filter] [-b big|little] [-C comment] [-D dstaddr_filter_name] [-d debug_level] [-f acl_fname] [-i input_filter] [-I output_filter] [-p srcport_filter] [-P dstport_filter] [-r ipprot_filter] [-S srcaddr_filter_name] [-t tos_filter] [-T tcp_flags_filter] [-x nexthop_filter_name] [-z z_level] DESCRIPTION The flow-filter utility will filter flows based on user selectable criteria. The IP address filters are defined in flow.acl or by the filename specified by -f. Other filters such as input interface and ports are defined on the command line. These filters accept range and negation operators, ie -i1-15 for input interfaces 1 through 15 or - i1,15 for input interfaces 1 and 15, or !1,15 for not input interfaces 1 and 15. The syntax is kludgy and needs reworked but works for most applications. ---- Original message ---- >Date: Sat, 23 Oct 2004 15:37:26 -0700 >From: bill fumerola <[EMAIL PROTECTED]> >Subject: Re: [Flow-tools] flow-filter: not interface # >To: Pedram Fard <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED] > >On Sat, Oct 23, 2004 at 06:29:02PM -0400, Pedram Fard wrote: >> I am trying to use flow-filter to filter out flows coming >> from certain interfaces. >> I used the following command: >> > flow-cat ATLAng | flow-filter -!56 | flow-export -f2 - >> m0x63020 | more >> >> I get the following error: >> 56: Event not found. > >[punchdrunk.local(ttypb)-fumerola Sat23Oct/15:36:53] >[ SECURE !1 ]$ echo hi >hi >[punchdrunk.local(ttypb)-fumerola Sat23Oct/15:36:57] >[ SECURE !2 ]$ !1 >echo hi >hi >[punchdrunk.local(ttypb)-fumerola Sat23Oct/15:36:58] >[ SECURE !3 ]$ !200 >zsh: no such event: 200 >[punchdrunk.local(ttypb)-fumerola Sat23Oct/15:37:00] >[ SECURE !3 ]$ history > 1 echo hi > 2 echo hi > >-- >- bill fumerola / [EMAIL PROTECTED] > > _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
