samplicator icon indicating copy to clipboard operation
samplicator copied to clipboard

Src IP or string based filter?

Open ksuuk opened this issue 5 years ago • 0 comments

Hi,

Scenario - devices are sending syslog and netflow to one samplicator, so one udp port (514) for syslog and one udp port (2500) for netflow. Syslog & netflow saved into same device and also forwarded to two other devices.

Now I have need to forward traffic from only some sender syslog and/or netflow to third device, so samplicator internal filtering would be best for such purpose. Using regex for strings will definitely be (slight)performance issue, but using sender src IP for the filter, should be fine.

Can You please add such functionality?

ksuuk avatar Apr 08 '19 07:04 ksuuk