Hi Amos, You're right, switch is not really true. But I still can't find the way on Solaris-like system like /proc/sys/net/bridge On Mon, Dec 5, 2011 at 7:25 PM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > > > "Like a switch"? or or did you really mean "like a bridge"? > > * switch ... no solution. Switches do not perform the NAT operations > required for interception. They also don't run software like Squid, so I > think this is a bad choice of word in your description. > > * bridge ... requires dropping packets out of the bridge into the routing > functionality. See the bridge section at > http://wiki.squid-cache.org/Features/Tproxy4#ebtables_on_a_Bridging_device > > Amos -- Best regards, Hai Nam, Nguyen