Splitting network traffic to ingress and egress

Different ways to split the monitored traffic to ingress/egress or IN/OUT.

Product: Flowmon OS

Version: Any

Platform: Any

How to split the traffic to IN/OUT?

How to split the traffic to ingress/egress?

It is necessary to create a new profile in the Monitoring Center - Profiles and add new channels to the profile, eg. channels "IN" and "OUT".

Each channel will be defined by a filter that splits the traffic. 

Examples, of how to split the traffic:

1. Using subnets

   src net in [10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/24] and not dst net in [10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/24]

   dst net in [10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/24] and not src net in [10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/24] 

   for internet upload/download
2. Using interface indexes (if flow data are exported by routers/switches)

   [in|out] if <interface_index>

3. Using VLANs

   [src|dst] vlan <num>

4. Using AS numbers

   [src|dst] as in [ <ASlist> ]

5. Some flow sources send also flow field "direction"

   dir [ingress|egress]