[ARGUS] How to filter for co thats not ZZ

[carter at qosient.com]

Hey Monah,
That should work … the only difference between US and ZZ is the 2 char string comparison.  The question is whether your flows have the ZZ in the DSR, or if they only have US, or a subset of the countries.  The ZZ we made up to label flow addresses that don’t have a country, so if you’ve used ralabel.1 or radium.1 to do country labeling, with a good delegated IP address list, then it should work fine.

If you have some flows that you think should work, send them and I’ll see what’s up.
Carter

       <http://qosient.com/>    	 	
Carter Bullard   <mailto:carter at qosient.com>•  Chairman / Founder / CTO
150 E 57th Street, Suite 12D
New York, New York 10022-2795
Phone +1.212.588.9133 • Mobile +1.917.497.9494

 

> On Aug 30, 2019, at 3:37 PM, Monah Baki <monahbaki at gmail.com> wrote:
> 
> Hi all,
> 
> Trying to run ratop with the following "and co not ZZ" I am not getting any results, if I do "and co not US" it works. Basically I want to see all countries except my non routeable IP communications.
> 
> Thanks
> Monah
> 
> _______________________________________________
> argus mailing list
> argus at qosient.com
> https://pairlist1.pair.net/mailman/listinfo/argus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20190830/03d7b29b/attachment.html>