Morgan
this is work in progress but operational. It works like this
1. suppose you are using Probe attached to the microcloud. This way
nProbe publishes on the microcloud tunnel/IMSI info
2. you start pfwrite with an imsi number, if found on the microcloud,
packet dump will start. If not found, it will wait until the probe (or
the probes) publish this info in Redis/microcloud, then capture starts
For the future we are developing a layer for troubleshooting that allows
you to capture traffic if selected users, while the same traffic is of
course monitored, dumped etc etc
Cheers Luca
On 06/19/2013 03:08 AM, Morgan Yang wrote:
Hi All:
I noticed, a "-m" option has been added to 5.6.0's pfwrite but it
request REDIS support
*#ifdef*HAVE_REDIS
printf("-m _<imsi>_ [Dump only the specified IMSI traffic
(Example: -m 284031122831060)]\n");
*#endif***
**
**
How could I go about verifying this feature? It doesn't look imsi
field itself is supported in the pf_ring filtering rules.
Much Thanks
Morgan yang
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
