Hi

I'm having a bit of difficulty getting my head around the tag-mask
option in flow-nfilter. I'm sucessfully tagging flows as they are
received using flow capture with this tag format.

# Tag format
# 0       7         15        23        31
# 0000 0000 0000 0000 0000 0000 0000 0000 (32 bits)
# EEEEEEEEEEEEEE AAAAAAAAAAAAAA NNNNNNNNN
#              |              |         | Network info
#              |              | Account Type
#              | Exchange

What tag-mask do I need to match anything with a tag of the form
0x000XXX02 where XXX can be anything?

My filter config looks something like this...(and doesn't work)...

filter-primitive match-tag-mask
  type tag-mask
  permit 0x00000002 0x000FFF02
  default deny

filter-definition BRAS-MASK
  match src-tag match-tag-mask

With a bit of playing I can get it to match specific tags but I don't
yet understand exactly how it's working, I need to match in the region
of 4k different tags so using wildcards seems like a good idea, rather
than creating massive config files.

Can someone point me in the right direction of how to use the tag-mask feature?

Thanks
Mark
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to