General Discussion Port Mirroring

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 3 subscribers
Views 6153 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port Mirroring

Godsbrother over 17 years ago

Can anyone let me know if it is possible to mirror one port to another to enable us to monitor traffic for troubleshooting please?

This thread was automatically locked due to age.

Parents

0 BarryG over 17 years ago

I think a bridged interface pair should do that.

However, last time I tried it (in version 7.001 or something like that), you have to make quite a few changes after changing an interface to bridged.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 17 years ago

I think a bridged interface pair should do that.

However, last time I tried it (in version 7.001 or something like that), you have to make quite a few changes after changing an interface to bridged.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BrucekConvergent over 17 years ago in reply to BarryG

Bridging would be the ticket, running it inline with the segment you wish to monitor. Making this change is no big deal, unless you are using the Astaro as a NAT device... a router would have to take over the NAT roles.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 17 years ago in reply to BrucekConvergent

The problem I had was that when I bridged my LAN and my WiFi DMZ, all the settings that had ethX had to be changed to br0, iirc.
e.g. DNS proxy listen interfaces, ...

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Gert over 17 years ago in reply to BarryG

Why don't you try an hardware tap to copy all the traffic to another system ?
See for instance http://www.cryptofile.com/tap/
Cancel
Vote Up 0 Vote Down

Cancel