Skip to contentSkip to conversation

match n packets every m

DISCUSSION Roberto Ferrari 2 participants 5 messages Oct 20, 2005 – Oct 24, 2005

lore
Share & tools
lore
#0 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,
I'm trying to find a way to match _n_ ip packets every _m_ I've tryied with the nth extension, but I've not been able to obtain this thing.
I've seen that I could insert a rule with "--packet x" for m times, if I've specifyied "--every m", but I'd like to follow some other way, more flexible.
Could someone kindly let me know if there is a smart way to do it? Thank you a lot,

Roberto Ferrari
- --

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDV7ZI0xokq8z7B1ARAoHDAJ0VS+FkfFyegUTJNu5LrgH/yoeufgCgnTFA R9RgU0xBHPr3acuBoYtWdG8=
=Lhp8
-----END PGP SIGNATURE-----

#1 lore raw
Quoted 12 lines · Roberto Ferrari

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,
I'm trying to find a way to match _n_ ip packets every _m_ I've tryied with the nth extension, but I've not been able to obtain this thing.
I've seen that I could insert a rule with "--packet x" for m times, if I've specifyied "--every m", but I'd like to follow some other way, more flexible.
Could someone kindly let me know if there is a smart way to do it? Thank you a lot,

The simplest and most sane would probably be to extend nth with what you want.

If not you will need the nth match repeated many times (n times) like you describe, with different --packet but same "--every m --counter X", finally followed by a "-m nth --every m --counter X" to match all the other..

Regards
Henrik

#2 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Henrik Nordstrom wrote:
[...]

Quoted 4 lines

The simplest and most sane would probably be to extend nth with what you want.

Thank you very much for the help, it seems that we reached the same conclusion. :-)
Do you have idea of where I should modify the nth code?
Do you think it could be safe to modify also the limit of 100 to the "--every", making it grow to 1000 or 2000?
Txs,

Roberto Ferrari.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDWMVu0xokq8z7B1ARAoSpAKCKm60mwojc4qe29BnJp+mCEmZcOwCdHOti 0UFW4yj00haZ0rj6Q7FuTXs=
=Av+C
-----END PGP SIGNATURE-----

#3 lore raw
Quoted 3 lines · Roberto Ferrari

Do you have idea of where I should modify the nth code?
Do you think it could be safe to modify also the limit of 100 to the "--every", making it grow to 1000 or 2000?

This limit is technically only when using --packet.

Regards
Henrik

#4 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoted 11 lines · Henrik Nordstrom
Quoted 3 lines · Roberto Ferrari

Do you have idea of where I should modify the nth code?
Do you think it could be safe to modify also the limit of 100 to the "--every", making it grow to 1000 or 2000?

This limit is technically only when using --packet.

Regards
Henrik

Thank you for your help. Is there anyone who knows where (I'm not a "so expert" developer, unfortunately)?
Thank's in advance,

Roberto.

- --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDXQme0xokq8z7B1ARAsL3AKCOyWb0/pYXOlQ722heuJsqWnlqHQCfUgAF zOefGm/qpi7/cL0Jgunz3gw=
=VbzN
-----END PGP SIGNATURE-----