Monitoring specific traffic with script

[sahoal]

I´m using your "Zabbix Packet Capture Agent" and it´s working fine to me right now. The only problem that i´m facing now is that I don´t know how to implement advanced filters.

For example:
I have a host with only 1 ethernet card inside my DMZ, and it receive a lot of packages from the internet, and some others from my local network. And the question is:

How can I monitor only the packages that came from Internet (and ignore the others that came from 192.168.1.0)?

thanks in advance!

[sahoal]

the file zabbix_script.txt contains the script that i´m using

[nelsonab]

Thanks for the feedback!

I'll try and add the agent to the subversion repository on red-tux.net and add a filter type relating to what you are looking for. It may involve some configuration settings on the client, not sure yet.