Module-specific Filter
Jump to navigation
Jump to search
The module-specific filter page allows setting allow/deny filters for traffic processing in specific modules. Traffic removed by the filter will not be available in statistics for the specific module. Other modules and the packet ring buffer are not affected. To filter live traffic to all modules and the packet ring buffer, use an Ingress filter instead.
| Filter | Description |
|---|---|
| IP Connections | This filter prevents connection statistics from being generated and stored for all entries matching an IP Filter. When using a deny list, no connections that include at least one of the specified IP addresses or subnets will be processed. Conversely, when using an allow list, only connections that include at least one of the specified IP addresses or subnets will be processed.
This filter can also be configured from the IP module's Connections tab or the Connections module. |
Filter Types
IP Filter
The IP Filter specifies a list of IP addresses and subnets to match against. It can either be configured as a deny list (default) or an allow list.
- /32 subnet mask: 192.168.1.1/32 means the filter will deny/allow IP 192.168.1.1
- /24 subnet mask: 192.168.1.0/24 means the filter will deny/allow IP range 192.168.1.0 - 192.168.1.255
- /16 subnet mask: 192.168.0.0/16 means the filter will deny/allow IP range 192.168.0.0 - 192.168.255.255