topic Wild Card searching in Traffic Monitor in General Topics

Wild Card searching in Traffic Monitor

dpenhall — Wed, 03 Aug 2011 00:20:58 GMT

Hi all,

This probably has a real simple answer but it has got me stumped. How do I do wild card searches in 4.x PAN Traffic logs ? For example, I want to find all traffic from a Class C subnet 192.168.1.x. Using a * does not seem to work ( ( addr.src in 192.168.1.* ) ) and throws a syntax error.

Cheers,

Re: Wild Card searching in Traffic Monitor

bryan — Wed, 03 Aug 2011 01:03:52 GMT

Hello,

You can cannot use wildcards in the filter, but you can summarize specifying the subnet in the filter, i.e.:

Source Filter, /24 subnet: ( addr.src in 10.10.10.0/24 )

Destination Filter, /24 subnet: (addr.dst in 10.10.1.0/24)

Regards,

Bryan

Re: Wild Card searching in Traffic Monitor

dpenhall — Wed, 03 Aug 2011 02:04:15 GMT

Hi Bryan,

Thanks for that. Exactly what I was after.

Daniel