> is not lying in the pmacct domain. FYI, pmacct leverages both regexp engine > and classifiers of the L7-filter project.
By the way, L7-filter have two types of filter: "The first speed shown for a pattern in the tables below is the speed when used in the kernel (with the old V8 regular expression library). The second is the speed when used in userspace (with the modern GNU library). " i.e.userspace version uses GNU regex(7) library. Are pmacct using it also? (in beginning, I also see many "finger" detects. Workaround it simply - delete finger pattern from set ;) -- Mike _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
