Specify a Firewall Filter to Select Traffic to Monitor

When you define a firewall filter, you select the initial traffic to be monitored. To configure a firewall filter, include the filter statement at the [edit firewall family inet] hierarchy level. All filtered traffic to be monitored must be accepted.

[edit]

firewall {

    family inet {

        filter input-monitoring-filter {

            term 1 {

                from {

                    destination-address {

                        10.7.0.0/16;

                    }

                }

                then {

                    count counter1;

                    accept; 

                } 

            } 

            term 2 {

                from {

                    destination-address {

                        10.6.0.0/16; 

                    } 

                } 

                then {

                    count counter2;

                    accept;

            } 

        } 

    }

}