> On Thu, May 24, 2012 at 8:01 AM, Per Granath <per.gran...@gcc.com.cy> > wrote: > > Well, this gentleman: http://mccltd.net/blog/?p=1199 has looked at that, > so: > > > > monitor traffic interface ge-1/0/0 no-resolve matching "(ip and (ip[1] & > 0xfc) >> 2 == 20)" > > > > would give you DSCP with AF22. > > But wont this only work for kernel-bound or -sourced traffic? > > Are there Juniper platforms for which one can capture transit traffic as well? > > --j
That's right. You would need to look at port mirroring, or sampling. ...or use a wire-tap. _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
