#  1412, Thu 9 Feb 95
#
#  Rule specification file to tally IP net <-> IP net,
#     tally DECnet and Novell and aggregate EtherTalk
#
#  Nevil Brownlee,  Computer Centre,  University of Auckland
#
SET 2
#
RULES
  SourcePeerType & 255 = IP:         Pushto, IP_pkt;
  SourcePeerType & 255 = Novell:     PushtoAct, Novell_pkt;
  SourcePeerType & 255 = EtherTalk:  PushtoAct, Apple_pkt;
  SourcePeerType & 255 = DECnet:     PushtoAct, DEC_pkt;
  Null & 0 = 0:                      Ignore, 0;
#
IP_pkt:
  SourcePeerAddress & 192.0.0.0 = 192.0.0.0:     Goto, low_C;
  SourcePeerAddress & 192.0.0.0 = 128.0.0.0:     Goto, low_B;
  SourcePeerAddress & 192.0.0.0 = 64.0.0.0:      Goto, low_A;
  SourcePeerAddress & 192.0.0.0 = 0.0.0.0:       Goto, low_A;
  Null & 0 = 0:                                  GotoAct, not_ABC;
low_A:
  DestPeerAddress & 192.0.0.0 = 192.0.0.0:  GotoAct, A_C;
  DestPeerAddress & 192.0.0.0 = 128.0.0.0:  GotoAct, A_B;
  DestPeerAddress & 192.0.0.0 = 64.0.0.0:   GotoAct, A_A;
  DestPeerAddress & 192.0.0.0 = 0.0.0.0:    GotoAct, A_A;
  Null & 0 = 0:                             GotoAct, not_ABC;
low_B:
  DestPeerAddress & 192.0.0.0 = 192.0.0.0:  GotoAct, B_C;
  DestPeerAddress & 192.0.0.0 = 128.0.0.0:  GotoAct, B_B;
  DestPeerAddress & 192.0.0.0 = 64.0.0.0:   GotoAct, B_A;
  DestPeerAddress & 192.0.0.0 = 0.0.0.0:    GotoAct, B_A;
  Null & 0 = 0:                             GotoAct, not_ABC;
low_C:
  DestPeerAddress & 192.0.0.0 = 192.0.0.0:  GotoAct, C_C;
  DestPeerAddress & 192.0.0.0 = 128.0.0.0:  GotoAct, C_B;
  DestPeerAddress & 192.0.0.0 = 64.0.0.0:   GotoAct, C_A;
  DestPeerAddress & 192.0.0.0 = 0.0.0.0:    GotoAct, C_A;
  Null & 0 = 0:                             GotoAct, not_ABC;
#
not_ABC:
  SourcePeerAddress   & 255.255.255.255 = 0:   PushPkttoAct, Next;
  DestPeerAddress     & 255.255.255.255 = 0:   PushPkttoAct, count_pkt;
A_C:
  SourcePeerAddress     & 255.0.0.0     = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.255.255.0 = 0:   PushPkttoAct, count_pkt;
A_B:
  SourcePeerAddress     & 255.0.0.0     = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.255.0.0   = 0:   PushPkttoAct, count_pkt;
A_A:
  SourcePeerAddress     & 255.0.0.0     = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.0.0.0     = 0:   PushPkttoAct, count_pkt;
B_C:
  SourcePeerAddress     & 255.255.0.0   = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.255.255.0 = 0:   PushPkttoAct, count_pkt;
B_B:
  SourcePeerAddress     & 255.255.0.0   = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.255.0.0   = 0:   PushPkttoAct, count_pkt;
B_A:
  SourcePeerAddress     & 255.255.0.0   = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.0.0.0     = 0:   PushPkttoAct, count_pkt;
C_C:
  SourcePeerAddress     & 255.255.255.0 = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.255.255.0 = 0:   PushPkttoAct, count_pkt;
C_B:
  SourcePeerAddress     & 255.255.255.0 = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.255.0.0   = 0:   PushPkttoAct, count_pkt;
C_A:
  SourcePeerAddress     & 255.255.255.0 = 0:   PushPkttoAct, Next;
  DestPeerAddress       & 255.0.0.0     = 0:   PushPkttoAct, count_pkt;
#
count_pkt:
  Null & 0 = 0:  Count, 0;  # Source and Dest Peer Address pushed above 
#
Novell_pkt:
  SourcePeerAddress  & 255.255.255.255 = 0: PushPktToAct, Next;
  DestPeerAddress    & 255.255.255.255 = 0: CountPkt, 0;
#
Apple_pkt:
  Null & 0 = 0:  Count, 0;  #  No detail for Ethertalk
#
DEC_pkt:
  SourcePeerAddress  & 255.255.255.0 = 0: PushPktToAct, Next;
  DestPeerAddress    & 255.255.255.0 = 0: CountPkt, 0;
#
STATISTICS
#
FORMAT FlowRuleSet FlowIndex FirstTime "  "
   SourcePeerType SourcePeerAddress DestPeerAddress "  "
   ToPDUs FromPDUs "  " ToOctets FromOctets;
#
# end of file