Sounds right - you can drop the src xxx or dst xxx and just use xxx
-B "host bozo.clown.school.edu and not net xxx.yyy.zzz.0/24"
Read up on the filter syntax in the tcpdump stuff - everything that uses libpcap has the same 'BPF' syntax.
Thanks - I'll try that.
Much obliged.
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
