match n packets every m

match n packets every m

[Roberto Ferrari]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,
I'm trying to find a way to match _n_ ip packets every _m_
I've tryied with the nth extension, but I've not been able to obtain
this thing.
I've seen that I could insert a rule with "--packet x" for m times, if
I've specifyied "--every m", but I'd like to follow some other way, more
flexible.
Could someone kindly let me know if there is a smart way to do it?
Thank you a lot,

Roberto Ferrari
- --


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDV7ZI0xokq8z7B1ARAoHDAJ0VS+FkfFyegUTJNu5LrgH/yoeufgCgnTFA
R9RgU0xBHPr3acuBoYtWdG8=
=Lhp8
-----END PGP SIGNATURE-----

Re: match n packets every m

[Henrik Nordstrom]

On Thu, 20 Oct 2005, Roberto Ferrari wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi all,
> I'm trying to find a way to match _n_ ip packets every _m_
> I've tryied with the nth extension, but I've not been able to obtain
> this thing.
> I've seen that I could insert a rule with "--packet x" for m times, if
> I've specifyied "--every m", but I'd like to follow some other way, more
> flexible.
> Could someone kindly let me know if there is a smart way to do it?
> Thank you a lot,


The simplest and most sane would probably be to extend nth with what you 
want.

If not you will need the nth match repeated many times (n times) like you 
describe, with different --packet but same "--every m --counter X", 
finally followed by a "-m nth --every m --counter X" to match all the 
other..

Regards
Henrik

Re: match n packets every m

[Roberto Ferrari]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Henrik Nordstrom wrote:
[...]
> 
> The simplest and most sane would probably be to extend nth with what you
> want.
> 

Thank you very much for the help, it seems that we reached the same
conclusion. :-)
Do you have idea of where I should modify the nth code?
Do you think it could be safe to modify also the limit of 100  to the
"--every", making it grow to 1000 or 2000?
Txs,

Roberto Ferrari.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDWMVu0xokq8z7B1ARAoSpAKCKm60mwojc4qe29BnJp+mCEmZcOwCdHOti
0UFW4yj00haZ0rj6Q7FuTXs=
=Av+C
-----END PGP SIGNATURE-----

Re: match n packets every m

[Henrik Nordstrom]

On Fri, 21 Oct 2005, Roberto Ferrari wrote:

> Do you have idea of where I should modify the nth code?
> Do you think it could be safe to modify also the limit of 100  to the
> "--every", making it grow to 1000 or 2000?

This limit is technically only when using --packet.

Regards
Henrik

Re: match n packets every m

[Roberto Ferrari]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Henrik Nordstrom wrote:
> On Fri, 21 Oct 2005, Roberto Ferrari wrote:
> 
>> Do you have idea of where I should modify the nth code?
>> Do you think it could be safe to modify also the limit of 100  to the
>> "--every", making it grow to 1000 or 2000?
> 
> 
> This limit is technically only when using --packet.
> 
> Regards
> Henrik

Thank you for your help. Is there anyone who knows where (I'm not a "so
expert" developer, unfortunately)?
Thank's in advance,

Roberto.

- --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDXQme0xokq8z7B1ARAsL3AKCOyWb0/pYXOlQ722heuJsqWnlqHQCfUgAF
zOefGm/qpi7/cL0Jgunz3gw=
=VbzN
-----END PGP SIGNATURE-----