[netflow-tools] ipv6 filtering - unwanted addresses showing up

Otto mworld at twbc.net
Wed Jan 4 15:00:41 EST 2012


Hi. I've been setting up some IPv6 filters with some unwanted results. I 
get link local and multicast addresses showing up.

e.g. (real ips removed)

discard src 2001:xxxx:xxxx:xxxx::/56
accept dst 2001:xxxx:xxxx:xxxx::/56
discard before date 20120101000000
discard after date 20120101235959
discard inet

Output:

1325347355,0,2157541701,127.0.0.1,2,146,2157232389,2157232289,0,0,fe80::456f:397d:4c49:b9f3,ff02::1:3,(null),0,0,64852,5355,17,0,0,0,0,0,0
1325347355,0,2157541701,127.0.0.1,2,146,2157234962,2157234862,0,0,fe80::456f:397d:4c49:b9f3,ff02::1:3,(null),0,0,62415,5355,17,0,0,0,0,0,0
1325347373,0,2157558941,127.0.0.1,22,1584,2157547205,2157252221,0,0,fe80::456f:397d:4c49:b9f3,ff02::1:ff54:e8c8,(null),0,0,0,0,58,0,0,0,0,0,0


Regards,
Otto.


More information about the netflow-tools mailing list