Yes, it is possible to filter packets when running the Torch tool on a MikroTik device. Torch is a traffic analysis utility that allows users to observe in real time the traffic passing through specific interfaces on the MikroTik device.
Although Torch is not a packet filtering tool per se, it does provide options to view and monitor packets based on certain criteria, which can be useful for network diagnostics and analysis.
To use Torch with filters, you can follow these steps in the WinBox interface or via the RouterOS command line:
- Access Torch:
- In WinBox: Go to
Tools
and then toTorch
. - On the command line: Use the command
/tool torch
.
- In WinBox: Go to
- Select interface:
- Specifies the interface over which you want to monitor traffic.
- Set filters:
- You can filter traffic by IP address, port or protocol. This allows you to focus on a specific type of traffic or packets from/to specific addresses.
/tool torch interface=ether1 src-address=192.168.1.1/24
This will filter and display traffic only to and from the 192.168.1.0/24 network on the ether1 interface. - Observe traffic:
- Torch will display traffic in real time, including details such as source address, destination, protocol, and amount of data transferred.
Torch is particularly useful for understanding the type of traffic that is flowing through your network and can be a valuable resource for network troubleshooting and performance optimization.
However, for advanced traffic filtering and control, it would be more appropriate to use MikroTik's firewall rules, which allow traffic to be blocked or allowed based on much more specific rules and with the ability to take actions based on those rules.
There are no tags for this post.