How to apply boolean logic to nettl

[Mario_88]

Hello:

I have an HPUX box 11.00 that runs an sniffer application between other systems. In some ocassions I want to use nettl to monitor network traffic between these systems the problem is that there is too much traffic. I want to implemente a filter to only see the traffic between four(1-4) boxes before my sniffer and one box(5) after the sniffer. In boolean logic would be

((Dest_host1 or Source_host1) or (Dest_host2 or S_host2) or(Dest_host3 or s_host3) or( d_host4 or s_host4) )AND (d_host5 or s_host5)

It woul be easy to do in tcpdump but I don´t know if is possible in nettl

* Note that if I use the following filter file
filtet ip_saddr host1
filter ip_daddr host1
filste ip_saddr host2
filter ip_daddr host2
.....
filter ip_daddr host5
filter ip_saddr host5

I would use all the traffic coming or going to these systems but not the selection I want.

Regards,
Mario

[Peter Godron]

Mario,
could you reduce the amount of traffic sniffed by protocol layer or module (nettl -entity)?
Regards

[Jim Keeble]

Hi Mario,

I don't believe that nettl has the type of boolean logic that you desire.

As an alternative, though, you can download both tcpdump and ethereal from the Internet Express bundle from http://software.hp.com . Both of these have the ability to filter the traffic at capture time, and ethereal has an extremely nice graphical interface.

Ethereal will display nettl traces as well (and tcpdump for that matter), and does have the type of filtering logic that you are looking for.

[Mario_88]

Hello:

I can´t use tcpdump as the interfaces are being used in promiscuous mode by an application.

Regards,
Mari