logging - Loggin traffic arriving promisc interface with linux -
i'm looking best approach setup linux box in order work black hole router, capturing packets without routing path. assuming port mirroring packets linux box, network interface in promiscuous mode, best choice log packet info (ip.src, ip.dst, tcp.sport, tcp.dport) file (preferably working daemon) ?
iptables perfect choice doesn't have promisc chain (for obvious reasons) it's not option.
thanks in advance. k
wireshark can log in promiscous mode, can store file, can log info mentioned
Comments
Post a Comment