I want to generate a log of ip addresses from a tap behind my gateway without having to capture and store all the traffic. I might want to store some traffic from each new address encountered. Do I need to do something like a custom capture filter for this?
