Use Global IP filters
You can use filter rules to allow or ignore network data capture based on IP address.
Define a list that limits data capture to IP addresses on that list. Define a Deny that ignores data capture from IP addresses on the list and allow data capture from all other IPs.
Allow list and Deny list IP filters follow these rules:
| Allow list | Deny list | Filter results |
|---|---|---|
| No | No | Captures all IPs |
| No | Yes | Captures all IPs except blocked items |
| Yes | No | Captures only allowed IPs |
| Yes | Yes | Captures all allowed IPs or IPs not on deny list |
Each filter entry can be a specific IP (v4 or v6) address, or a range of addresses using the following forms:
- 192.168.2.* (IPv4 octets may use * to indicate wildcard)
- 10.20.30.0/24 (IPv4 CIDR notation)
- 2001:0db8:85a3:0042:1000:8a2e:0370:7300/120 (IPv6 CIDR notation)
For more information, see Include or exclude specific incoming data.