Doing a View with a Range of Source IP address
Doing a View with a Range of Source IP address
How do we create a view with a limiter with range of IP address, would like to not have to use 30 to 40 and statements.
Re: Doing a View with a Range of Source IP address
You could use anything that nfdump lets you use. Unfortunately, it doesn't seem to support ranges.
IP address
[src|dst] ip <ipaddr>
[src|dst] host <ipaddr>
with <ipaddr> as any valid IPv4, IPv6 address, or a full qualified
hostname. In case of a hostname, the IP address is looked up in
DNS. If more than a single IP address is found, all IP addresses
are chained together. (ip1 or ip2 or ip3 ... )
To check if an IP address is in a known IP list, use
[src|dst] ip in [ <iplist> ]
[src|dst] host in [ <iplist> ]
<iplist> is a space or comma separated list of individual <ipaddr>
or full qualified hostnames, which are looked up in DNS. If more
than a single IP address is found, all IP addresses are put into
the list.
[src|dst] net a.b.c.d m.n.r.s
Select the IPv4 network a.b.c.d with netmask m.n.r.s.
[src|dst] net <net>/<num>
with <net> as a valid IPv4 or IPv6 network and <num> as maskbits.
The number of mask bits must match the appropriate address familiy
in IPv4 or IPv6. Networks may be abreviated such as 172.16/16 if
they are unambiguous.
Be sure to check out our Knowledgebase for helpful articles and solutions!