-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Philippe,

For performance reason, the collector process does not include a filter engine.
So you need a kind of post process filter to do that. Current NfSen does not 
support that out of the box.
A somewhat ugly hack would be to create a kind of second 'live' profile with 
your filter applied. You could then expire
the original 'live' with a short time span.

Sorry for that.

        - Peter


Philippe Strauss wrote:
> Hello nfsen users,
> 
> In a network design I'm working on, I cannot do without having duplication of 
> some flows.
> traffis coming in an interface, getting out in another router running netflow.
> I can filter out dupplication with this filter:
> 
> "not (IN IF 2 and OUT IF 2)"
> 
> applied to a router.
> Is this possible to do this, so that the traffic, pps, flows/s values in live 
> profile ignore the dupplicated flows
> (I'm interested in netflow on AS boundary, not at box level, and using router 
> that can only handle netflow ingress
> an interface).
> 
> Regards.
> 

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBSQVtjP5AbZRALNr/AQKqHgP7BjrwtL03jop7PY9RIpjQfnE9tz9ZMhct
OhI7LBuYJUF/efGre2jdWRt19/fKgK1JMYTWrFaiUTJtChVsRQPoBbtbcbuMrayq
1kdYPWDMGy2rw9+mI/Ig2cfC8cBVxdUaO0KEUDA+vKfzL4nhwDQiSjyf6VO9EgeA
SetPGcFj3bA=
=68iA
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to