5

SPAN/Mirrored port usage

view full story
linux-howto

http://serverfault.com – I have a HP ProCurve switch with 24 ports. If I set up port 24 to mirror port 1 (which goes to my router), can I use port 24 for normal LAN access as well as to run something like ntop or bandwidthd? Or does mirroring mean that the port can only be used to read the mirrored packets? MEaning a 2nd NIC is required for LAN access? (HowTos)

xskl's picture
Submitted by xskl on 11/05/2012 – Made popular on 11/05/2012

Stories similar to SPAN/Mirrored port usage

I would like to tcpdump all traffic that my router does when it makes a firmware update.

So I have taken a HP ProCurve 1800-8G switch and mirrored port 7 to port 8.

I have connected:

Internet connection in port 6 routers WAN port in port 7 Linux host running tcpdump in port 8

I suppose the router have a dhcp client on the WAN interface.

However I don't see any activity.

I am a bit new to vlan, so forgive me if I ask noob question.

I am trying to setup a vlan on my netgear switch (GS105E). I want to create 2 separated networks and I want both of them have internet access.

My setup is

Modem connect to router WRT54G (with dd-wrt) connect to netgear switch

I have configured port 1 and port 5 as vlan1 and port 2 to port 4 as vlan2.

I'd like to set up a SPAN [port-mirror] port on our main router. The router is a Cisco 2821. The goal is to be able to troubleshoot Internet issues at the packet level, and it won't happen that often. Here are the ports:

GigabitEthernet0/0 - Connects to AT&T uplink equipment...

I am developing a device which acts as a multicast host, and want to observe it as it responds to IGMP Queries.

My Catalyst 3560G is set up as follows (full config below): Port 0/1 is a TFTP server allowing the device under test to boot. Port 0/3 is the device under test. Port 0/14 is my PC running wireshark, and ostinato for sending the IGMP query.

I'm Confused from the fact that Vlan tagging is done at access port and trunk port always gets tagged packets (until its case of native vlan).But I still believe in other fact which says tagging happen only when a frame hit the trunk port which means trunk port gets untagged frame and tagging is not possible at access port.

Would like to know where actually this tagging happens ?

and also which

I changed my server SSH port to something else than port 22, however when I access to domain.com:<ssh-port> I can see an output of

SSH-2.0-OpenSSH_5.8p1 Debian-7ubuntu1

I want to block direct port access except SSH, how can I do this with the iptables?

[other] Running SSH on Port 80 32 weeks 6 days ago

I there any way to run SSH on port 80 without losing access to HTTP? I was planning to SSH into to home computer from school, but my ISP (clearwire) blocks every port except 53, 80, 9800, and 9801. I tried running SSH into those ports just to check if incoming connections were allowed.

I have configured the port mirroring with Open vSwitch, from VM n°A with vif11.1 interface to VM n°B with vif15.1 interface in order to get the UDP SIP stream on B .

root@blade:~# ovs-vsctl -- set Bridge br0 mirrors=@m -- --id=@vif11.1 get Port vif11.1 -- --id=@vif15.1 get Port vif15.1 -- --id=@m create Mirror name=app1Mirror select-dst-port=@vif11.1 select-src-port=@vif11.1 output-port=@vif15.1

Hello:

I'm using Suse 11 as a router. The machine is a thin blade with room for only one card: a network card. I'm using the network port on the motherboard as my external network port, and the network card as my local port. Everything works fine.

I'm thinking of replacing my network card with a four port card: