The code is in plugins/netflowPlugin.c. Look for netflowMainLoop() - you'll see it select and receive from the socket, then use dissectFlow() to update the various counters.
Understand that the -B filter is a bpf filter, but since you're not using libpcap, there's a lot of code you're going to have to pull in. It might be a lot simpler - and 90% as useful - to just put a simple host match in, like rrd does. If you want to talk about a custom coding project, contact me off-list. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Eric Greenwood Sent: Tuesday, February 18, 2003 5:27 PM To: [EMAIL PROTECTED] Subject: [Ntop] netflow filter I would like to use the -B filter expression option to filter incoming Netflow records - can I do this - will it work ?? In the alternative - where should I look in the .c code to hack a filter in ... rgds Eric Greenwood 6������������jj��� _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
