Re: [pmacct-discussion] Filter destination IP on lists with tens of thousands of entries?

2022-12-16 Thread Paolo Lucente
Hi Rich, Indexed pre_tag_map could fit the bill (and if going down this route i do recommend to perform a proof-of-concept using latest & greatest code in master since it has been a recent area of growth / improvement). Example of how you could populate the pre_tag_map (centric on IPv4 but

Re: [pmacct-discussion] Filter destination IP on lists with tens of thousands of entries?

2022-12-15 Thread Karl O. Pinc
On Thu, 15 Dec 2022 19:03:45 + "Compton, Rich A" wrote: > Hi, I have a few (~20) lists of IPs provided by Shadowserver > (https://www.shadowserver.org) on a daily basis. Some lists contain > a few hundred IPs and some contain tens of thousands of IPs. I want > to have pmacct filter out netf

[pmacct-discussion] Filter destination IP on lists with tens of thousands of entries?

2022-12-15 Thread Compton, Rich A
Hi, I have a few (~20) lists of IPs provided by Shadowserver (https://www.shadowserver.org) on a daily basis. Some lists contain a few hundred IPs and some contain tens of thousands of IPs. I want to have pmacct filter out netflow records that do not have a destination IP contained in these l