Changeset 73 for trunk/conf/rules.txt
- Timestamp:
- 07/24/08 10:47:32 (15 years ago)
- Files:
-
- 1 modified
Legend:
- Unmodified
- Added
- Removed
-
trunk/conf/rules.txt
r47 r73 1 1 # This file is an exemple 2 # you must create your own rules2 # you must create your own filters 3 3 4 4 # #: commented line 5 # N: rulename (string without space)5 # N: filter name (string without space) 6 6 # O: output type (only socket in this release) 7 7 # C: check field : C <field ID> <operator> <value> … … 15 15 # Example 16 16 # Dump on 10.0.01:1111 all MPLS flow (field 46 = 5) 17 #N test_MPLS 18 #O socket 10.0.0.1 1111 19 #C 46 = 5 17 # Get this rule enable because the collector don't start without filter 18 N BUG 19 O socket 127.0.0.1 1111 20 C 60 = 38 20 21 21 22 # Example 22 # This ruledepends on functionnality not present in this release23 # This filter depends on functionnality not present in this release 23 24 # from TCP flows 24 25 # prefix aggregation … … 31 32 32 33 # Example 33 # This ruledepends on functionnality not present in this release34 # This filter depends on functionnality not present in this release 34 35 # get all flows whom size between 15 & 16 Mo 35 36 # record all fields in a file