59
edits
Ingress filter: Difference between revisions
added information to the complex ingress filter
Tom.Wegener (talk | contribs) mNo edit summary |
Tom.Wegener (talk | contribs) (added information to the complex ingress filter) |
||
| Line 13: | Line 13: | ||
* physical interface IDs (as listed in Interface statistics). | * physical interface IDs (as listed in Interface statistics). | ||
* duplicate packets. | * duplicate packets. | ||
* a set of filter via the expert-filter | |||
They can all be set to either deny list or allow list mode. | They can all be set to either deny list or allow list mode. | ||
| Line 50: | Line 51: | ||
The '''Delete all''' button allows for deleting all IP addresses from the filter list. | The '''Delete all''' button allows for deleting all IP addresses from the filter list. | ||
=== Expert Filter === | |||
You are able to filter the packets from live traffic via the expert or complex filter which you can also use when capturing traffic. The filter is defined in a C-style syntax and supports combination of AND/OR operators, precedence order with parentheses and equal/not equal comparisons. | |||
You are also able to select if packets matching the filter should be monitored or excluded from monitoring. More information are on the [[Capture module#Using%20expert%20filters%20to%20start%20captures|Capture module]] and [[Complex filter]] sites in the wiki. | |||
=== Packet deduplication === | === Packet deduplication === | ||