How can I filter packets from a port monitor?
Posted
by
engineerchuan
on Server Fault
See other posts from Server Fault
or by engineerchuan
Published on 2011-11-12T23:33:19Z
Indexed on
2011/11/13
1:54 UTC
Read the original article
Hit count: 576
I have some data going from Point A to Point B. I have a SPAN monitor set up to a monitoring device C.
To recreate some real world scenarios, I want to filter out all traffic which is a certain type (H.323 VoIP Signaling Packets) so that C sees a subset of the information that is flowing from A to B.
What would the easiest way to do this be? I assume I would need a computer with 2 NIC cards and some software to examine each packet and chuck out the H.323 VoIP packets?
Thanks!
© Server Fault or respective owner