We have netflow running on the outside interface of our router which is taking a full BGP Internet feed. I need to exclude the BGP traffic on the sensor so that it won't continue to skew our reports. I have tried in the exclude box typing:
SourcePort[179] OR DestinationPort[179]
When I save that, the sensor trips an alarm "Could not bind socket. Address and port are already in use."
What am I missing?
Add comment