325
edits
Ingress filter: Difference between revisions
Jump to navigation
Jump to search
m
no edit summary
Remco.derooy (talk | contribs) mNo edit summary |
Remco.derooy (talk | contribs) mNo edit summary |
||
| Line 1: | Line 1: | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
|- | |- | ||
| [[File:NIC filter.png|1000px|none|right]] | | [[File:NIC filter.png|1000px|none|right]] | ||
|} | |} | ||
'''ingress (NIC) filter''' | |||
The ingress (NIC) filter page, allows setting allow/deny filters for live traffic preprocessing. Filtered out/denied traffic, will NOT become available throughout the dashboard nor the packet ring buffer. Filtered out/denied traffic will be irretrievable for (post) analysis. | The ingress (NIC) filter page, allows setting allow/deny filters for live traffic preprocessing. Filtered out/denied traffic, will NOT become available throughout the dashboard nor the packet ring buffer. Filtered out/denied traffic will be irretrievable for (post) analysis. | ||
| Line 10: | Line 10: | ||
This ingress (NIC) filter is applied on live traffic only. When replaying the ring buffer, loading a pcap or using the remote traffic capture feature, filtering is not used. | This ingress (NIC) filter is applied on live traffic only. When replaying the ring buffer, loading a pcap or using the remote traffic capture feature, filtering is not used. | ||
Filters can be applied for: | |||
* IP addresses (with possible subnet mask). | * IP addresses (with possible subnet mask). | ||
* pairs of IP addresses (with possible subnet mask). | * pairs of IP addresses (with possible subnet mask). | ||
| Line 28: | Line 29: | ||
=== IP filters === | === IP filters === | ||
The IP filter page allows importing an IP list in the format: | The IP filter page allows importing an IP list in the following format: | ||
#A line with a comment | #A line with a comment | ||