I’m running a 7150 in tap aggregation mode. Is there a way to do a cutoff after a certain amount of data is sent (say, 12k) for a given 5 tuple? For instance, if I have packets coming in for 22.214.171.124:1 -> 126.96.36.199:2 tcp, and 8k is transferred, send everything to the tool port, but if I have 188.8.131.52:3 -> 184.108.40.206:4 tcp and 10g is being transferred, stop sending to the tool port after 12k. It would also be nice to set policies such as if dst port == 443 then cutoff == 8k (essentially BPF filters). My search of these forums turned up nothing. Thanks,
Post your Answer
You must be logged in to post an answer.