Copy all bridge traffic to a specific interface

Posted by Azendale on Ask Ubuntu See other posts from Ask Ubuntu or by Azendale
Published on 2011-01-21T06:55:44Z Indexed on 2011/02/07 23:34 UTC
Read the original article Hit count: 342

I have a bridge/switch set up an a machine that has multiple ports. Occasionally, I have a vm running through virtualbox, and I'll have it use a virtual adapter and then I add the adapter to the bridge. I have heard that some switches can copy all the traffic they see to a specific port on the bridge, usually for network monitoring. I would like to be able to run some windows based network tools. I do not want to run Windows on the actual hardware, because it would be lots of work to duplicate my setup in windows, so I was thinking if I can copy all traffic to a port, I can send it to a VM with windows. How can I set this up? I think this might be ebtables area, but I don't know ebtables well enough to know for sure, and it always seems like (from my understanding of ebtables) ebtables does something with the traffic (drop, accept, etc), but never copies it.

© Ask Ubuntu or respective owner

Related posts about networking

Related posts about security