Hi, I have a Cisco switch port that is sending me packets into one interface as part of a span / switch port data mirroring. By turning on 'promisc' for the interface the interface starts seeing all the traffic, however the data does not appear to travel through the mangle table. Remembering the MAC / IP and Nexthop will not line up with the data on this box is their a way to route this traffic out a pptp/pp interface for remote analysing. Daniel
