Hello list,
I’m using ntopng which rely on libpcap for the filtering expression. Below is
what I think to be valide to use into my ntopng configuration file but seem to
not working at all.
--packet-filter "ip and not proto ipv6 and not ether host ff:ff:ff:ff:ff:ff and
not net (224.0.0.0/8 or 2
> On Jan 23, 2015, at 12:25 PM, Gerhard Mourani wrote:
>
>> I’m using ntopng which rely on libpcap for the filtering expression. Below
>> is what I think to be valide to use into my ntopng configuration file but
>> seem to not working at all.
>>
>> --packe
29 jf 28
(028) ret #65535
(029) ret #0
> On Jan 23, 2015, at 5:48 PM, Guy Harris wrote:
>
>
> On Jan 23, 2015, at 1:23 PM, Gerhard Mourani wrote:
>
>> Yes, it is what I want but seem that ntopng doesn’t take it in consideration
>> because I can still
. So I try to exclude the IP of the probe itself and it still appears
in the result!
On Fri, Jan 23, 2015 at 9:03 PM, Guy Harris wrote:
>
> On Jan 23, 2015, at 5:44 PM, Gerhard Mourani wrote:
>
> > On mine I get:
>
> The same code.
>
> If you're seeing packets t