Offer the possibilities to say NOT on a protocol filter criteria

[arno-st]

I would love to have a NOT function on the protocol filter part.

When you need to know who is using what globally, it can be helpful to filter the flow except this list of host/protocol.

example:
I have some video server, and I know it's taking my top 50 bandwidth users, but I need to get rid of them, to be able to see the rest.
And that as an option for every protocol filter.
Like a question mark.

[TheWitness]

What protocol would you be removing. Same applies maybe to CDN servers like Akamai.

[arno-st]

Well it's on the Protocol filter, but it's more IP source or destination, in my case.

And your point is correct, having the option to suppress some CDN would be nice.

[TheWitness]

We really need to switch from the current (static) filter design, so something a bit more robust. I've got the design in my head for them moment.