Creating a mirror network. How?

[guest17399]

You need to make a mirror and send it to the port. In this port, I will connect the moloch.
Found nothing in the documentation.

How to be?

In general, I propose to develop a plugin for moloch.
Similar to os-ntopng

[guest17399]

Actuality

[guest15389]

You don't do that in OPNSense.

You make a mirror port on a switch and it all depends on your switch.

They also sell devices and such that make it a bit simpler like:

https://www.amazon.com/CyberData-011258-Gigabit-Mirroring-Switch/dp/B00IJFLJ4Y

[guest17399]

You don't do that in OPNSense.

You make a mirror port on a switch and it all depends on your switch.

They also sell devices and such that make it a bit simpler like:

https://www.amazon.com/CyberData-011258-Gigabit-Mirroring-Switch/dp/B00IJFLJ4Y

Thank.

Why opnsense can not mirror?

[guest15389]

It's not a router thing as it's a switch thing.

It's like asking why isn't an apple an orange.

[bartjsmit]

You can capture all traffic on an interface for troubleshooting, but for analysis on an external host, netflow is better. Reporting, Netflow, Destinations.

Bart...