#  1230, Fri 20 Oct 95
#
#  Rules to look at adjacent broadcast vs non-broadcast traffic by protocol
#     Broadcast packets set FLowClass to 1 and save SourcePeerAddress
#     Non-broadcast packets leave FlowClass at 0, (the default value)
#
#  Nevil Brownlee, ITSS Technology Development, The University of Auckland
#
SET 4
#
RULES
  SourcePeerType & 255 = dummy: Ignore, 0;  # PC meter time-filler packets
  DestAdjacentAddress & 01-00-00-00-00-00 = 01-00-00-00-00-00:
    GotoAct, broadcast;
  SourceAdjacentAddress & 01-00-00-00-00-00 = 01-00-00-00-00-00:
    Retry, 0;  # Broadcast packet with direction reversed
  Null & 0 = 0:  GotoAct, c_pkt;  # Not a broadcast packet
#
broadcast:
  DestAdjacentAddress & FF-FF-FF-FF-FF-FF = 0: PushPkttoAct, Next;
  FlowClass & 255 = 1:  Pushto, Next;
#
  SourcePeerType & 255 = IP:  GotoAct, c_ip;
  SourcePeerType & 255 = EtherTalk:  GotoAct, c_at;
  Null & 0 = 0:  GotoAct, Next;
  SourcePeerAddress & 255.255.255.255 = 0: PushPkttoAct, c_pkt;
c_ip:
  SourcePeerAddress & 255.255.255.0 = 0: PushPkttoAct, c_pkt;
c_at:
  SourcePeerAddress & 255.255.0.0 = 0: PushPkttoAct, c_pkt;
#
c_pkt:
  SourcePeerType & 255 = 0:  CountPkt, 0;
#
FORMAT
   SourcePeerType "  "  ToPDUs "  " ToOctets "  "
   FlowClass "  "SourcePeerAddress;
#
# end of file