Port mirroring on FreeBSD

[Nikolay Denev]

On Sat, Jan 18, 2014 at 7:10 AM, Jason Hellenthal
<jhellenthal at dataix.net> wrote:
> Sorry for the top post but cell phone here . . .
>
> Have you thought of pf with the dup-to rule ?
>
> Also have thoughts of cisco etherChannel
>
> --
>  Jason Hellenthal
>  Voice: 95.30.17.6/616
>  JJH48-ARIN
>
>> On Jan 18, 2014, at 1:58, hiren panchasara <hiren.panchasara at gmail.com> wrote:
>>
>> I have this weird requirement that I am juggling right now and I
>> wanted to reach out to larger audience:
>>
>> In this box I have 2 dualport ixgbe 10G cards. On ingress, I want to
>> get data off of 2 ports of first 10G card and lagg/lacp them into 1
>> stream of data. But for outgoing, I want to have 2 identical streams
>> of data going out on 2 ports of the second 10G card. (not
>> load-balancing but more of a mirroring).
>>
>> The reason for this is, I need to be able to provide same data to 2
>> different application hosts downstream for monitoring. Something like:
>> http://www.juniper.net/techpubs/en_US/junos13.2/topics/concept/port-mirroring-ex-series.html
>>
>> I believe a regular switch might be perfect but for I could not find
>> anything simple in FreeBSD to do that.
>>
>> Luigi: Can netmap/vale be helpful here?
>>
>> Any other pointers would be really appreciated.
>>
>> Cheers,
>> Hiren
>> _______________________________________________
>> freebsd-net at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"

if_bridge(4) and a port in the bridge configured as "span" port with ifconfig?
However I'm not sure if that's going to be fast enough for 10G, and
maybe as you've mentioned Netmap might be a better solution.



--Nikolay