08-02-2011 05:20 PM
Hi all,
This probably has a real simple answer but it has got me stumped. How do I do wild card searches in 4.x PAN Traffic logs ? For example, I want to find all traffic from a Class C subnet 192.168.1.x. Using a * does not seem to work ( ( addr.src in 192.168.1.* ) ) and throws a syntax error.
Cheers,
08-02-2011 06:03 PM
Hello,
You can cannot use wildcards in the filter, but you can summarize specifying the subnet in the filter, i.e.:
Source Filter, /24 subnet: ( addr.src in 10.10.10.0/24 )
Destination Filter, /24 subnet: (addr.dst in 10.10.1.0/24)
Regards,
Bryan
08-02-2011 06:03 PM
Hello,
You can cannot use wildcards in the filter, but you can summarize specifying the subnet in the filter, i.e.:
Source Filter, /24 subnet: ( addr.src in 10.10.10.0/24 )
Destination Filter, /24 subnet: (addr.dst in 10.10.1.0/24)
Regards,
Bryan
08-02-2011 07:04 PM
Hi Bryan,
Thanks for that. Exactly what I was after.
Daniel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
