favero@grad.ufsc.br
2005-Feb-16 18:05 UTC
How can i send the same traffic to 2 different interface
Hi! I am making some tests here, and i wanna miror all the traffic going to a ip from one interface to another ip. example: all packets going to 64.223.167.100 should be transmitted by ppp0 to internet and by eth2 to the adress 192.168.1.100. Someone know how can i do it using iptables or ip route/ip rule? Tks in advance! Fernando Favero _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Kenneth Kalmer
2005-Feb-17 12:29 UTC
Re: How can i send the same traffic to 2 different interface
On Wed, 16 Feb 2005 15:05:19 -0300 (EST), favero@grad.ufsc.br <favero@grad.ufsc.br> wrote:> Hi! I am making some tests here, and i wanna miror all the > traffic going to a ip from one interface to another ip. > example: > all packets going to 64.223.167.100 should be transmitted by > ppp0 to internet and by eth2 to the adress 192.168.1.100. > Someone know how can i do it using iptables or ip route/ip > rule?Correct if I''m wrong, I''m still learning. Wouldn''t this break IP at protocol level? The host 192.168.1.100 will disregard the traffic because it''s not the intended destination... I''m not sure but it seems impossible. HTH> Tks in advance! > Fernando Favero > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ >-- Kenneth Kalmer kenneth.kalmer@gmail.com http://opensourcery.blogspot.com _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Tóth Nándor
2005-Feb-17 12:50 UTC
Re: How can i send the same traffic to 2 different interface
Hi! Kenneth Kalmer wrote:> On Wed, 16 Feb 2005 15:05:19 -0300 (EST), favero@grad.ufsc.br > <favero@grad.ufsc.br> wrote: > >>Hi! I am making some tests here, and i wanna miror all the >>traffic going to a ip from one interface to another ip. >>example: >>all packets going to 64.223.167.100 should be transmitted by >>ppp0 to internet and by eth2 to the adress 192.168.1.100. >>Someone know how can i do it using iptables or ip route/ip >>rule?-j MIRROR> Correct if I''m wrong, I''m still learning. Wouldn''t this break IP at > protocol level? The host 192.168.1.100 will disregard the traffic > because it''s not the intended destination... I''m not sure but it seems > impossible.Yes, you are right too. See this thread: http://lists.debian.org/debian-security/2001/11/msg00152.html Maybe he would like to sniff in the traffic. -- Udv, Nandor _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Kenneth Kalmer
2005-Feb-17 13:01 UTC
Re: How can i send the same traffic to 2 different interface
On Thu, 17 Feb 2005 13:50:09 +0100, Tóth Nándor <nug@sch.bme.hu> wrote:> Hi! > > Kenneth Kalmer wrote: > > On Wed, 16 Feb 2005 15:05:19 -0300 (EST), favero@grad.ufsc.br > > <favero@grad.ufsc.br> wrote: > > > >>Hi! I am making some tests here, and i wanna miror all the > >>traffic going to a ip from one interface to another ip. > >>example: > >>all packets going to 64.223.167.100 should be transmitted by > >>ppp0 to internet and by eth2 to the adress 192.168.1.100. > >>Someone know how can i do it using iptables or ip route/ip > >>rule? > > -j MIRRORWill send the packets back to the destination, not down another route...> > > Correct if I''m wrong, I''m still learning. Wouldn''t this break IP at > > protocol level? The host 192.168.1.100 will disregard the traffic > > because it''s not the intended destination... I''m not sure but it seems > > impossible. > > Yes, you are right too. See this thread: > http://lists.debian.org/debian-security/2001/11/msg00152.htmlThis is good reading, thanks!> > Maybe he would like to sniff in the traffic. > > -- > Udv, > Nandor > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ >-- Kenneth Kalmer kenneth.kalmer@gmail.com http://opensourcery.blogspot.com _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/