[netflow-tools] Filtering by IP

Pete Bristow pete at midworld.co.uk
Tue Jul 19 20:41:30 EST 2005

The filtering in flowd is very reminiscent of pf. I was wondering if it's
possible to have something along the lines of

internal_traffic = "{ }"
discard src $internal_traffic dst $internal_traffic

If not what's the suggested way of doing this is as once you have more
than a few subnets the rule set grows quite large and I'd imagine quite
inefficient to run.



More information about the netflow-tools mailing list