|
From: Riccardo C. <ric...@pi...> - 2013-12-09 12:21:08
|
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body bgcolor="#FFFFFF"> Hi guys,<br> <br> there is some dependency(like whois or something similar) for AS number filter to works?<br> <br> As in this example, i used ip filter and then as filter based on an facebook ip:<br> [root@bns ~]# nfdump -M /data/nfsen/profiles-data/live/7206vxr -T -R 2013/12/09/nfcapd.201312090930:2013/12/09/nfcapd.201312091155 -c 20 "dst ip 69.171.242.27"<br> Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows<br> 2013-12-09 09:29:50.709 0.000 TCP 192.168.105.70:45611 -> 69.171.242.27:80 1 41 1<br> 2013-12-09 09:29:50.753 0.000 TCP 192.168.105.70:45613 -> 69.171.242.27:80 1 41 1<br> 2013-12-09 09:29:50.761 0.000 TCP 192.168.105.70:45612 -> 69.171.242.27:80 1 41 1<br> <br> [root@bns ~]# nfdump -M /data/nfsen/profiles-data/live/7206vxr -T -R 2013/12/09/nfcapd.201312090930:2013/12/09/nfcapd.201312091155 -c 20 "dst as 32934"<br> Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows<br> Summary: total flows: 0, total bytes: 0, total packets: 0, avg bps: 0, avg pps: 0, avg bpp: 0<br> Time window: 2013-12-09 09:24:59 - 2013-12-09 11:59:57<br> Total flows processed: 687120, Blocks skipped: 0, Bytes read: 35734128<br> Sys: 0.207s flows/second: 3303985.7 Wall: 0.205s flows/second: 3343893.7 <br> <br> <br> Regards<br> <br> <div class="moz-signature">-- <br> <div style="font-size:medium"><span style="font-family:Arial"><font color="#007dba"><b>Riccardo Cupardo</b></font></span></div> <div><font face="Arial"><span style="font-size:9pt"><br> <b>W</b> +39 02 84278805 <br> </span></font><b style="font-family:Arial; font-size:12px">S</b><span style="font-family:Arial; font-size:12px"> riccardo.cupardo</span></div> <div><font face="Arial"><span style="font-size:9pt"><b>E </b><a href="mailto:ric...@pi...">ric...@pi...</a><b>*</b></span></font></div> <div><font face="Arial"><span style="font-size:9pt"><br> <font color="#7F7F7F"><i><br> </i></font>via Breda 176, 2nd Floor, Milan, 20126 Italy<br> <b>picture the possibilities</b> | <b>piksel.com<br> </b><font color="#7F7F7F"><i><br> <img src="cid:par...@pi..." type="image/png"><br> </i></font></span></font></div> </div> <p style="font-family:arial; font-size:12px">This message is private and confidential. If you have received this message in error, please notify the sender or ser...@pi... and remove it from your system.</p> <p style="font-family:arial; font-size:12px">Piksel Inc is a company registered in the United States New York City, 1250 Broadway, Suite 1902, New York, NY 10001. F No. = 2931986</p> </body> </html> |