Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


iptables_tee_port_mirror

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
iptables_tee_port_mirror [2017/12/31 10:00]
admin [Debian 9 (stretch) example]
iptables_tee_port_mirror [2017/12/31 10:17]
admin [PCEngines APU2 - iptables tee / clone packets]
Line 3: Line 3:
 __From the manual:__ The TEE target will clone a packet and redirect this clone to another machine on the **local** network segment. In other words, the nexthop must be the target, or you will have to configure the nexthop to forward it further if so desired. __From the manual:__ The TEE target will clone a packet and redirect this clone to another machine on the **local** network segment. In other words, the nexthop must be the target, or you will have to configure the nexthop to forward it further if so desired.
  
-If you don't have a switch with mirror / span ports, you can use iptables to clone the packets to another machine on the same subnet.+If you don't have a switch with mirror / span ports, you can use iptables to clone the packets to another machine on the same subnet. That monitor box needs to be on the same layer 2 network, and it needs to be reachable by IP address.
  
 ====Overview==== ====Overview====
iptables_tee_port_mirror.txt ยท Last modified: 2017/12/31 10:17 by admin