Re: Linux bridge/switch port mirroring/SPAN/port monitoring/Roving Analysis?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

>Is there a way to port mirroring/SPAN on a linux bridge? If so, what
>would I need to do to set it up? I'm hoping to port morror to
>vboxnet0.

Mirroring functionality is build into ifb[1]. There's tc action "mirred
egress mirror" which, used in a proper context, can mirror ingress
and/or egress traffic to other interface. In your case, mirrored
interface would be br0.

Here [2] our colegue is describing ingress mirroring from eth1 to
eth2-5.

And important note here [3] about using "protocol all" in tc filter, if
you also want to get non-ip traffic mirrored.

[1]
http://www.linuxfoundation.org/collaborate/workgroups/networking/ifb#IFB_Example
[2] http://marc.info/?l=linux-netdev&m=128853067804910&w=2
[3] http://marc.info/?l=linux-netdev&m=128861016403775&w=2

Best regards,
Marek Kierdelewicz
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux