Skip navigation.

Bit's World

Hope the best,plan the worst!

How to monitoring stream under port mirroring mode and bridge mode?

Recently I encountered a problem to monitor stream without actually interrupt the packet's passthrough,
so we set the port mirroring on the layer2 switch device to mirroring all the traffic to our device's
nic.

As to monitor these traffic, we set our linux station to bridge mode, but as all these stream(up/down flow) all just come in one port of the bridge, the packet will not be sent up to the upper layer and can not be monitored.

Finnaly, It is found that I only need to switch on the bridge's flood mode, then all the stream can be sent up. Then it works.

Finally came backa sample firewall service script

Write a comment

You must be logged in to write a comment. If you're not a registered member, please sign up.