Re: Port Mirroring in Linux

Markus Rehbach <Markus.Rehbach@xxxxxx> wrote:
Rick Jones wrote:
A bit of coding around libpcap to sniff traffic on one or more
interfaces and then just dump them out the desired interface sounds
like it would do the trick. If the mirror interface is also being
sniffed it might require a bit more logic to avoid loops.

Something like tcpbridge?

Perhaps, I've never seen tcpbridge.

Actually, I'm surprised that the Linux bridging code doesn't have
support for designating a mirror interface. I'd have thought it was
there already. Although I suspect the argument might be that if you
want to see traffic just sniff the interfaces making-up the bridge.

rick jones
--
a wide gulf separates "what if" from "if only"
these opinions are mine, all mine; HP might not want them anyway... :)
feel free to post, OR email to rick.jones2 in hp.com but NOT BOTH...
.

Relevant Pages

  • Re: OT: How to block/ filter undesirables?
    ... That's a neat trick, when the OP is using Google groups with a THML ... interface. ...
    (rec.crafts.metalworking)
  • Re: Prolog module system
    ... exports, put the exports in another file and use:- include/1 to share ... This trick probably doesn't work in most current Prolog ... You do get a bit of checking in the form of a warning, when the interface ... module system construct for it. ...
    (comp.lang.prolog)
  • RE: Preventing aggregation in a .NET class
    ... The trick was to use an interface with a property but ... trick is to wrap the object in an ObjectHandleclass and unwrap it on the ... I was able to return any MarshalByRef object that then in ... "Robert Simpson" wrote: ...
    (microsoft.public.dotnet.framework.interop)
  • Re: Arrrrghhhhhhh (unit testing comments)
    ... There aren't any OTAPI hooks for the unit testing wizards. ... The "trick" ... that code that assumes class vs. interface. ...
    (borland.public.delphi.non-technical)