First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

How to filter for international traffic?

Anyone know of a way to filter or flag a connection that is not within America?

gmirsky2's avatar
1
gmirsky2
asked 2020-10-03 05:51:59 +0000
Jaap's avatar
13.7k
Jaap
updated 2020-10-03 05:57:21 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

1

Try this for a display filter: !(ip.geoip.dst_country == "United States"). This works as long as you have the GeoIP setup, see here.

Jaap's avatar
13.7k
Jaap
answered 2020-10-03 06:03:38 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thank you very much for quick answer

gmirsky2's avatar gmirsky2 (2020-10-03 07:52:41 +0000) edit
more
  • delete

@gmirsky2 We don't close the questions here, instead we accept answers by clicking the checkmark icon to the left of the answer.

grahamb's avatar grahamb (2020-10-03 12:51:28 +0000) edit
more
  • delete

Also note that the accuracy of Geo IP information is not 100%. So it's not perfect but a close estimation.

hugo.vanderkooij's avatar hugo.vanderkooij (2020-10-05 07:28:25 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer