Net Optics Smart Filtering Appliance User Manual download pdf (Page 39)

*** Condential - DO NOT Distribute ***

Director

Note: __________________________________________________________________________________________________

Instead of lteradd, you can use a lterins command to dene lters. The only difference is that lterins

allows you to specify the lter's ID, which is its position in the pending lter list. (Use lterlist so see the IDs

of all pending lters.) When you use a lterins command, the rst parameter must be id=<id> where <id> is a

decimal number in the range 1 to 999. For example: lterinsid=2in_ports=n1.1out_ports=m.1denes a lter

that sends all the trafc from Network Port 1 to Monitor Port 1 and places this lter in the second location in the

pending lter list.

________________________________________________________________________________________________________

Tip! ___________________________________________________________________________________________________

The lterdel command can be used to delete a lter from the pending lter list. The syntax is a lterdelid=<id>

where <id> is a decimal number in the range 1 to 999 corresponding to the position in the pending lter list. Use

the lterlist command so see the IDs of all pending lters.

________________________________________________________________________________________________________

Exclusive lters

Filters can be specied using action=drop in order to create exclusive lters. (An exclusive lter excludes packets rather

an including them.) For example, suppose you would like to monitor all trafc on a link except for the UDP trafc. To

specify this lter, use the following commands. Note that the drop lter must come rst so it is earlier in the CAM.

lteraddin_ports=n1.1ip_proto=17action=drop

lteraddin_ports=n1.1action=redirredir_ports=m.1

ltercommit

Monitor Port 1

All

Network Port 1

(drop)

match

no match

Protocol =

UDP

lter add in_ports=n1.1 ip_proto=17 action=drop

lter add in_ports=n1.1 action=redir redir_ports=m.1

CAM

Address Filter

1 n1.1 ip_proto=UDP action=drop

2 n1.1 m.1

Creating an exclusive lterFigure 38:

Tip! ___________________________________________________________________________________________________

If you only dene switch connections, with no ltering, the CAM is not involved and the switches do not interact.

________________________________________________________________________________________________________

Tip! ___________________________________________________________________________________________________

Filters that use exclusive sets of Network ports (each Network port is included in only a single lter) do not interact.

For example,

lteraddin_ports=n1.1-n1.5<lter_parameter_list> <monitor_port_list>

does not interact with

lteraddin_ports=n1.6-n1.10<lter_parameter_list> <monitor_port_list>

________________________________________________________________________________________________________

1 2 ... 34 35 36 37 38 39 40 41 42 43 44 ... 56 57

Comments to this Manuals

No comments

Net Optics Smart Filtering Appliance User Manual Page 39

Comments to this Manuals