logging - Loggin traffic arriving promisc interface with linux -


i'm looking best approach setup linux box in order work black hole router, capturing packets without routing path. assuming port mirroring packets linux box, network interface in promiscuous mode, best choice log packet info (ip.src, ip.dst, tcp.sport, tcp.dport) file (preferably working daemon) ?

iptables perfect choice doesn't have promisc chain (for obvious reasons) it's not option.

thanks in advance. k

wireshark can log in promiscous mode, can store file, can log info mentioned


Comments

Popular posts from this blog

How to remove text and logo OR add Overflow on Android ActionBar using AppCompat on API 8? -

html - How to style widget with post count different than without post count -

url rewriting - How to redirect a http POST with urlrewritefilter -