Hi Slava, On Thu, Sep 24, 2009 at 10:28:16PM +0300, Slava Dubrovskiy wrote:
> Can I use long filters? > > For example, for tcpdump working > tcpdump -n src net (91.206.226.0/23 or 91.209.165.0/24) or dst net > (91.206.226.0/23 or 91.209.165.0/24) > > But for pretag.map this filter not work. Yes, you can. If the filter works for the local tcpdump, it should reasonably work for pmacct aswell. Are you correctly quoting it? Do you get any specific error back or "it doesn't tag as it should"? I verify a filter similar to the one below working fine on one of my boxes (with a libpcap 0.9.5): id=1 ip=X filter='src net (Y/23 or Z/24) or dst net (Y/23 or Z/24)' Let me know. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
