There's examples at:

http://blather.michaelwlucas.com/?p=482

http://blather.michaelwlucas.com/?p=494

using this in filter.cfg:

filter-definition ip-addr
  match ip-source-address VAR_ADDR
  or
  match ip-destination-address VAR_ADDR

Also ip-source-address and ip-destination-address

==ml


On Thu, Feb 03, 2011 at 07:51:14AM -0500, Drew Weaver wrote:
> Is there any way to specify the source/dest ip address on the flow-filter 
> command line (instead of using a flow.acl?)
> 
> thanks,
> -Drew
> 

> _______________________________________________
> Flow-tools mailing list
> [email protected]
> http://mailman.splintered.net/mailman/listinfo/flow-tools

-- 
Michael W. Lucas        
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
[email protected], Twitter @mwlauthor
_______________________________________________
Flow-tools mailing list
[email protected]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to