OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: JetA on November 06, 2018, 08:30:27 am

Title: Creating a mirror network. How?
Post by: JetA on November 06, 2018, 08:30:27 am
You need to make a mirror and send it to the port. In this port, I will connect the moloch.
Found nothing in the documentation.

How to be?

In general, I propose to develop a plugin for moloch.
Similar to os-ntopng
Title: Re: Creating a mirror network. How?
Post by: JetA on November 07, 2018, 03:14:59 pm
Actuality
Title: Re: Creating a mirror network. How?
Post by: Animosity022 on November 07, 2018, 03:17:54 pm
You don't do that in OPNSense.

You make a mirror port on a switch and it all depends on your switch.

They also sell devices and such that make it a bit simpler like:

https://www.amazon.com/CyberData-011258-Gigabit-Mirroring-Switch/dp/B00IJFLJ4Y
Title: Re: Creating a mirror network. How?
Post by: JetA on November 08, 2018, 10:44:45 pm
You don't do that in OPNSense.

You make a mirror port on a switch and it all depends on your switch.

They also sell devices and such that make it a bit simpler like:

https://www.amazon.com/CyberData-011258-Gigabit-Mirroring-Switch/dp/B00IJFLJ4Y
Thank.

Why opnsense can not mirror?
Title: Re: Creating a mirror network. How?
Post by: Animosity022 on November 09, 2018, 04:38:24 am
It's not a router thing as it's a switch thing.

It's like asking why isn't an apple an orange.
Title: Re: Creating a mirror network. How?
Post by: bartjsmit on November 09, 2018, 08:25:53 am
You can capture all traffic on an interface for troubleshooting, but for analysis on an external host, netflow is better. Reporting, Netflow, Destinations.

Bart...