Example 4

Goal
You are an administrator of your corporate Lotus Notes server (e.g., the server has the IP address 216.106.88.42). The server accepts incoming connections (Lotus Notes and SMTP) from the other servers and initiates the outgoing connection (Lotus Notes and SMTP). You want to monitor and count the Lotus Notes traffic and SMTP mail traffic. Let's assume that the Lotus Notes traffic uses TCP port 1352 and the SMTP protocol uses TCP port number 25.

Solution
You should create four filters.

Filter 1. The outgoing Lotus Notes connections.
N
Rule
Type of IP 
protocol
Source
address
Source
port
Destination
address
Destination
port
Both
directions
Action
for
packet
Additional condition
1 TCP My computer Any Any 1352 Yes Count  
Filter 2. The outgoing SMTP mail.
N
Rule
Type of IP 
protocol
Source
address
Source
port
Destination
address
Destination
port
Both
directions
Action
for
packet
Additional condition
1 TCP My computer Any Any 25 Yes Count  
Filter 3. The incoming Lotus Notes connections.
N
Rule
Type of IP 
protocol
Source
address
Source
port
Destination
address
Destination
port
Both
directions
Action
for
packet
Additional condition
1 TCP My computer 1352 Any Any Yes Count  
Filter 4. The incoming SMTP mail.
N
Rule
Type of IP 
protocol
Source
address
Source
port
Destination
address
Destination
port
Both
directions
Action
for
packet
Additional condition
1 TCP My computer 25 Any Any Yes Count  

 

 Note