<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18813">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face=Arial>Hello,</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I would like to filter specific port all (
IN & Out) traffic. I am trying to Variable binding for
specifying dynamic ( at run time) port.</FONT></DIV>
<DIV><FONT size=2 face=Arial>but it's not working. My file structure and
commands are as follows.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>File: test_filter.cfg</FONT></DIV>
<DIV><FONT size=2
face=Arial>---------------------------------------------------</FONT></DIV>
<DIV><FONT size=2 face=Arial>filter-primitive VAR_PORT<BR> type
ip-port<BR> permit @CPRT<BR> default deny</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>filter-definition custom_port<BR>
match ip-source-port VAR_PORT<BR>
or<BR> match ip-destination-port VAR_PORT<BR></FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>
<DIV><FONT size=2 face=Arial>File: test_report.cfg</FONT></DIV>
<DIV>------------------------------------------------------------</DIV>
<DIV>include-filter /home/esdsnet/flow_script/test_filter.cfg</DIV>
<DIV> </DIV>
<DIV>stat-report t10<BR>type ip-address<BR>filter custom_port<BR>
output<BR> sort +octets<BR> records
30<BR> fields -flows,-packets,-duration<BR>
path <A>/home/esdsnet/flow_script/filter_data/@CPRT</A></DIV>
<DIV> </DIV>
<DIV>stat-definition t10<BR>report t10<BR></DIV>
<DIV> </DIV>
<DIV>Command: </DIV>
<DIV>-----------------------------------------------------------</DIV>
<DIV>/usr/bin/flow-cat -p
/home/esdsnet/flow_data/lan_flow_data/2009/2009-09/2009-09-12 |
flow-report -s test_report.cfg -S t10 -v CPRT=21</DIV>
<DIV>
<DIV>----------------------------------------------------------------------------------------------------------------------</DIV></DIV>
<DIV> </DIV>
<DIV>Is there anything weong with my command for filters... </DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Narendra</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></DIV></FONT></BODY></HTML>