[netflow-tools] Filtering by IP

Pete Bristow pete at midworld.co.uk
Tue Jul 19 20:41:30 EST 2005


Hi
The filtering in flowd is very reminiscent of pf. I was wondering if it's
possible to have something along the lines of

internal_traffic = "{ 192.168.0.0/24 192.168.2.0/24 }"
discard src $internal_traffic dst $internal_traffic

If not what's the suggested way of doing this is as once you have more
than a few subnets the rule set grows quite large and I'd imagine quite
inefficient to run.

Thanks

Pete




More information about the netflow-tools mailing list