Possible to filter on src vid != dst vid?

Carter Bullard carter at qosient.com
Tue Aug 5 20:00:17 EDT 2008


Hey Tez,
Currently we don't do filters like "src vid neq dst vid", but I can  
always add
more filters, so I'll look into this.  Please send email when you get  
back,
and hopefully I'll have a solution.

Carter

On Aug 5, 2008, at 7:17 PM, Terry Burton wrote:

> On Tue, Aug 5, 2008 at 12:51 PM, Carter Bullard <carter at qosient.com>  
> wrote:
>> The numbers don't look quite right, but you never know with loss.
> <...snip...>
>
> Hi Carter,
>
> Thanks for your response regarding packet loss calculations. I'll look
> forward to looking into this more thoroughly when I return from an
> imminent holiday in two weeks time.
>
>> If you want more detail, just ask questions on the list.  If I  
>> can't answer, somebody else may chime in :o)
>
> I'd just like to repeat a part of my original email that went
> unaddressed regarding filtering using comparison operators on VLAN
> tags.
>
>> -----Original Message-----
>> From: "Terry Burton" <tez at terryburton.co.uk>
>>
>> Date: Tue, 5 Aug 2008 11:35:24
>> To: Argus<argus-info at lists.andrew.cmu.edu>
>> Subject: [ARGUS] Possible to filter on src vid != dst vid?
> <...snip...>
>> However my real question is this: Is there some way of asserting a
>> filter along the lines of "src vid != dst vid" so that I see only
>> inter-VLAN flows as I'm not interested in seeing the inter-subnet
>> traffic on "shared networks"?
>
> Thanks again for your reply.
>
>
> All the best,
>
> Tez
>





More information about the argus mailing list