[j-nsp] "monitor traffic" broken?
Eric Van Tol
eric at atlantech.net
Mon Nov 1 13:30:00 EST 2004
monitor traffic only sees traffic source from that particular interface
or destined to that particular interface. You cannot see traffic moving
*across* the interface - it's not meant to be used as a packet sniffer.
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Daniel Roesen
Sent: Monday, November 01, 2004 1:24 PM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] "monitor traffic" broken?
monitor traffic interface ge-0/0/0.123 matching "port 53"
This SHOULD show me all DNS traffic in/out this interface, correct?
But actually, I see only incoming traffic, and the matching term
is completely ignored. Same goes for "host x.x.x.x" or so.
Am I doing something wrong?
CLUE-RIPE -- Jabber: dr at cluenet.de -- dr at IRCnet -- PGP: 0xA85C8AA0
juniper-nsp mailing list juniper-nsp at puck.nether.net
More information about the juniper-nsp