cloning traffic with iptables

[sbuhlig at gmail.com (Sam Buhlig)]

One of the guys in my 2600 group has a nice little solution that I am going
to test at home. Here is a link to his presentation that he made.

 http://cinci2600.com/?fuseaction=download.go&id=29

Shows how to make a passive ether tap.

Here is some other cool presentations that can be downloaded.

http://cinci2600.com/?fuseaction=download.show

SamIAm

On Tue, Jan 6, 2009 at 9:06 AM, Mike Patterson <mike.patterson at unb.ca>wrote:

> Robin Wood wrote on 1/6/09 4:23 AM:
> > 2009/1/6 Don Berry <don_berry at comcast.net>:
> > > Do it upstream on the network interfaces. Use the switch that the
> interface
> > > is connected to and do port mirroring or cloning.
> >
> > I'm designing a device which can be dropped onto any point of a
> > network to sniff traffic so need the device itself to do it.
>
> Am I being simple, or is what you want just a bridge?  I did this with a
> FreeBSD box, just bridged em0 to em1 and sniffed on the bridge device.
> No reason you shouldn't be able to do something similar with iptables,
> no?  (Of course, I hate iptables, which is why it was a BSD box and not
> a Linux box, but I digress.)
>
> Mike
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090106/8aed43cb/attachment.htm