Re: [Nfdump-discuss] nfdump src/dst mask field

[Peter H. <ph...@us...>]

On 8/30/13 W35 18:33, Jordan Whited wrote:
> nfdump raw record output for src/dst mask includes the prefix lookup with the mask next to it. Is there a way to filter
> on this?
> 
>   src mask     =                24 172.17.6.0/24 <http://172.17.6.0/24>
>   dst mask     =                24 10.160.0.0/24 <http://10.160.0.0/24>
> 
> "src mask 24" obviously works but I'd like to filter on 172.17.6.0/24 <http://172.17.6.0/24>.
> 
> srcnet and srcip are not what I'm looking for, I'm trying to filter on the prefix from the route lookup

Use: 'src net 172.17.6.0/24'

	- Peter

> 
> 
> ------------------------------------------------------------------------------
> Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
> Discover the easy way to master current and previous Microsoft technologies
> and advance your career. Get an incredible 1,500+ hours of step-by-step
> tutorial videos with LearnDevNow. Subscribe today and save!
> http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
--
Be nice to your netflow data