Re: Port Mirroring in Linux

From: Rick Jones <rick.jones2@xxxxxx>
Date: Wed, 31 Oct 2007 17:40:39 +0000 (UTC)

jeniffer <zenith.of.perfection@xxxxxxxxx> wrote:

I have to implement port mirroring feature in linux.ie All inbound-
outbound packets of a particular interface are mirrored to another
interface. I need to implement it in both the bridging and routing
paths.Is there any utility in linux which helps to do this?

A bit of coding around libpcap to sniff traffic on one or more
interfaces and then just dump them out the desired interface sounds
like it would do the trick. If the mirror interface is also being
sniffed it might require a bit more logic to avoid loops.

rick jones
--
web2.0 n, the dot.com reunion tour...
these opinions are mine, all mine; HP might not want them anyway... :)
feel free to post, OR email to rick.jones2 in hp.com but NOT BOTH...
.

Follow-Ups:
- Re: Port Mirroring in Linux
  - From: Markus Rehbach

References:
- Port Mirroring in Linux
  - From: jeniffer

Prev by Date: Re: Port Mirroring in Linux
Next by Date: Re: A basic question about networking
Previous by thread: Re: Port Mirroring in Linux
Next by thread: Re: Port Mirroring in Linux
Index(es):
- Date
- Thread

Relevant Pages

Re: [9fans] source browsing via http is back
... What interface should be used to used to mirror sources? ... I again propose that sources should be mirrorable via venti (and venti/copy ... publically readable venti (venti/ro proxy) and the scores published (and ...
(comp.os.plan9)
Re: [9fans] source browsing via http is back
... What interface should be used to used to mirror sources? ... then the robots hammer ...
(comp.os.plan9)
Re: Port Mirroring in Linux
... outbound packets of a particular interface are mirrored to another ... I need to implement it in both the bridging and routing ... If the mirror interface is also being ...
(comp.os.linux.networking)
Re: [9fans] source browsing via http is back
... What interface should be used to used to mirror sources? ... what is the labs approved way to stay in sync? ...
(comp.os.plan9)
Re: Traffic NOT moving through the correct network interface?
... Kernel IP routing table ... loopback interface, but that's not part of this problem. ... Everything is done by the kernel. ... Policy based routing requires you ...
(alt.os.linux)