Trying to make a Host into a gigabit hub for testing

Chris Dionissopoulos dionch at freemail.gr
Wed Oct 19 17:28:48 PDT 2005


SS>I am setting up a test environment with multiple IDS's.  ngctl looks 
like a solution but it is not broadcasting all packets to all interfaces 
as the documentation appears to state it should.  I've probably made 
some error in configuration.
SS>
SS>My goal is to put em0 into a spanned port in promiscuous mode and 
broadcast all traffic from that port out the other network interfaces.  
I plan on having em0 (gigabit) and 6 other gigabit interfaces.  Each 
will then echo the same traffic to six other machines (IDS's) for testing.
SS>
SS>The proof of concept with a gigabit (EM0) and 4 10/100 ethernets 
(sfx).  The 10/100's will be replaced for implementation.
SS>
SS>Any help would be appreciated.  My config follows:

Hi,
Why to use ng_fec and ng_one2many together?
how about something simplier, like:

                              +----------+ -->-sf0:lower--->wire
wire>--em:lower->| one2many | -->-sf1:lower--->wire
                             |                  | -->-sf2:lower--->wire
                             +----------+ -->sf3:lower--->wire

ngctl mkpeer em0: one2many lower one
ngctl name em0:lower o2m
ngctl connect sf0:  o2m lower many0
ngctl connect sf1: o2m lower many1
ngctl connect sf2: o2m lower many2
ngctl connect sf3: o2m lower many3
ngctl msg o2m setconfig "{ xmitAlg=2 failAlg=1 enabledLinks=[1 1 1 1 1] }"
 
ngctl msg sf0: setpromisc 1
ngctl msg sf0: setautosrc 0
ngctl msg sf1: setpromisc 1
ngctl msg sf1: setautosrc 0
ngctl msg sf2: setpromisc 1
ngctl msg sf2: setautosrc 0
ngctl msg sf3: setpromisc 1
ngctl msg sf3: setautosrc 0
ngctl msg em0: setpromisc 1
ngctl msg em0: setautosrc 0     

This keeps kernel-stack isolated from traffic, I think
(and all interfaces involved layer2 unreachable from outsiders).

Just tell us if its working for you.

Chris.

____________________________________________________________________
http://www.freemail.gr - δωρεάν υπηρεσία ηλεκτρονικού ταχυδρομείου.
http://www.freemail.gr - free email service for the Greek-speaking.


More information about the freebsd-net mailing list