BPF to ignore client traffic picked up on other sensor

  • 1
  • Idea
  • Updated 4 years ago
I want to prevent our sensor from capturing client traffic that I capture on our client sensor (student/guest subnets). The client subnets that I want to ignore are:,, and

Will this BPF do the trick?
not (net or net or net or net

Should I apply it as an IDS filter, Traffic Monitor filter or both?

Ans. If you wish to stop the LANGuardian recording any events or traffic then apply the bpf to both the IDS and traffic monitor.

The following should work for you:

not net and not net and not net and not net
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 393 Posts
  • 8 Reply Likes

Posted 4 years ago

  • 1

Be the first to post a reply!