Re: Traffic Mirroring for Debugging

[Bonnel Christophe <mage.tophinus@free.fr>]

I suppose you have multiples interfaces on your 192.168.1.10. Normally, 
you have multiple IP addresses on your 192.168.1.10, one address for 
each interface. If you bridge interfaces, all your interfaces will have 
one and only one IP address 192.168.1.10. If you prefer, your machine 
(192.168.1.10) will work as switch.

You can see the beginning of this article (no need to use the firewall 
part, use only D1 or D2 depending on your configuration):
http://www.debian.org/doc/manuals/securing-debian-howto/ap-bridge-fw.en.html
Search also on google with "debian+bridge". I'm french and I have many 
links but only in my language.

HTH, Christophe


Volkan YAZICI a écrit :
> On Fri, 22 Aug 2008, Bonnel Christophe <mage.tophinus@free.fr> writes:
>   
> > Why don't you bridge the interfaces of 192.168.1.10?
> >     
>
> I don't have in depth experience with bridging, would you mind
> explaining a little bit about it please. (Example tutorial pointers will
> be appreciated.)
>
>   
> > In that case, you need to reconfigure client to point to 192.168.1.20
> > and you can sniff your network via the 192.168.1.10 machine?
> >     
>
> What I really need is not spoofing, I need to somehow redirect identical
> network traffic to a second machine. Applications are running on
> Microsoft Windows Servers on 1.2 and 1.20. Is bridging in the way you
> mentioned capable of doing such a thing?
>
>
> Regards.
>
>
>