Paul Halliday wrote:
I am trying to grab a section of data within a time constraint. Is it
possible to do something like
filter-primitive 15minutes
type time-date
permit gt 12:00:00
deny lt 12:15:00
I have tried a couple different combinations, but I am not having much luck.
Thanks.
excuse the lag (ehhem 6 months), I ran into this problem today and
didn't find a list answer, so I figured I'd post my solution.
What works for me is:
filter-primitive 00h
type time
deny gt 01:00:00
permit gt 00:00:00
(note the deny must go first).
This will match traffic between 00:00:01 and 01:00:00, if i understand
the logic correctly.
For other hours in the day, this works:
filter-primitive 01h
type time
deny gt 02:00:00
deny lt 01:00:00
permit gt 01:00:00
I then use that as an additional match in my filter-definition. The
configuration file gets quite large so I automate the building of it
from a database.
-andrew
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
