[Cflowd] RE: [flow-tools] Newbie getting off the ground second (and I hope last for a bit) question

From: Scott Sheppard (scott.sheppard@arch.bellsouth.net)
Date: Wed Feb 12 2003 - 07:47:01 PST

Next message: Mark Fullmer: "[Cflowd] Re: [flow-tools] Typical Hardware"

Previous message: The American Academy of Experts In Traumatic Stress: "[Cflowd] School Crisis Response"
In reply to: Ed Ravin: "[Cflowd] Re: [flow-tools] Newbie getting off the ground"
Next in thread: Zoltan Ori: "[Cflowd] Re: [flow-tools] Typical Hardware"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello

Thank you all for your answers to my previous post. I have one more.

I am collecting flow traffic. I am thrilled.

I see that I can use flow filter to pull out information after the fact from
a flow file.

What I really want to do is filter the flows in the first place and only
capture data from CIDR blocks of interest can I accomplish this with
filter-fname? I am having trouble understanding in flow capture -f
(filtername) and -F (filter-definition) exactly what these do.Can some on
direct me to reading that discusses these options beyond the man page for
flow-capture?

Thanks

Scott Sheppard

_______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd

Next message: Mark Fullmer: "[Cflowd] Re: [flow-tools] Typical Hardware"
Previous message: The American Academy of Experts In Traumatic Stress: "[Cflowd] School Crisis Response"
In reply to: Ed Ravin: "[Cflowd] Re: [flow-tools] Newbie getting off the ground"
Next in thread: Zoltan Ori: "[Cflowd] Re: [flow-tools] Typical Hardware"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Wed Feb 12 2003 - 08:00:05 PST