> #Now the definitions:
> 
> filter-definition inboundtraffic
>   match src-ip-addr outblock
>   match dst-ip-addr inblock
> 
> filter-definition outboundtraffic
>   match src-ip-addr inblock
>   match dst-ip-addr outblockpregi
> 

You filtered out all the flows with the above definitions. I think some
ORs will get you closer to what you're after. Try these definitions:


filter-definition inboundtraffic
  match src-ip-addr outblock
  or
  match dst-ip-addr inblock

filter-definition outboundtraffic
  match src-ip-addr inblock
  or
  match dst-ip-addr outblockpregi

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to