the filter is not applied to the flows but on the incoming packets. You should set white/black list into the NetFlow plugin.
Cheers, Luca
Scott Cameron wrote:
Hi guys,
I'm trying to set a pcap filter to filter out certain unwanted traffic. Our goal is to only see traffic from the internet, to our network, and vice versa.
My pcap filter:
not src and dst net x.x.x.0/20
I'm running NetFlow v7 on a Catalyst 6500 and exporting to the ntop netflow collector. However, I can still see in the statistics for each IP that it is picking up at least some of the 'internal' traffic.
Is my filter broken, or am I missing something else?
Scott
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
-- Luca Deri <[EMAIL PROTECTED]> http://luca.ntop.org/ Hacker: someone who loves to program and enjoys being clever about it - Richard Stallman
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
