Wildcard/Subnet Selection to Exclude from all NTA Views

I'd like the ability to be able to choose a subnet for full exclusion from ALL NTA views.

I'd also like the ability to wildcard conversation views without having to know about the addresses of every single endpoint.

For example, say I have an iSCSI network I don't care about displaying NTA information about, but I need to pull NTA info from other nodes on the switch.

I should be able to say 'don't show me any conversation (OR any other information) from anything on the 10.10.100.x network.

Now, we can eliminate these ranges easily from the IP Address Groups module, but what about conversation, endpoint, and other views?

Thanks.

Find more posts tagged with

prodfr

netflow

traffic

view_in_nta

nta

Status: None

Comments

rharland2012

Come on, people....gimme some votes! This is driving me nuts....

dark235

Does this still not work? What's the deal? Seems like it would make it a lot easier for us if we could exclude internal networks only to look at external-bound traffic.

badmin

Or at least increase the number of filters to something above 21, something like 64.

At the very minimum let us know that 10.0.0.0/24, 10.0.0.1-255, 10.0.0, and 10.0.0.* will not work. It will take any free-form thing you want and not work and not even tell you that it isn't going to.