[LARTC] How can i send the same traffic to 2 different interface

[LARTC] How can i send the same traffic to 2 different interface

[favero]

Hi! I am making some tests here, and i wanna miror all the 
traffic going to a ip from one interface to another ip.
example:
all packets going to 64.223.167.100 should be transmitted by 
ppp0 to internet and by eth2 to the adress 192.168.1.100.
Someone know how can i do it using iptables or ip route/ip 
rule?
Tks in advance!
Fernando Favero
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] How can i send the same traffic to 2 different interface

[Kenneth Kalmer]

On Wed, 16 Feb 2005 15:05:19 -0300 (EST), favero@grad.ufsc.br
<favero@grad.ufsc.br> wrote:
> Hi! I am making some tests here, and i wanna miror all the
> traffic going to a ip from one interface to another ip.
> example:
> all packets going to 64.223.167.100 should be transmitted by
> ppp0 to internet and by eth2 to the adress 192.168.1.100.
> Someone know how can i do it using iptables or ip route/ip
> rule?

Correct if I'm wrong, I'm still learning. Wouldn't this break IP at
protocol level? The host 192.168.1.100 will disregard the traffic
because it's not the intended destination... I'm not sure but it seems
impossible.

HTH

> Tks in advance!
> Fernando Favero
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
> 


-- 

Kenneth Kalmer
kenneth.kalmer@gmail.com
http://opensourcery.blogspot.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] How can i send the same traffic to 2 different interface

[Tóth Nándor]

Hi!

Kenneth Kalmer wrote:
> On Wed, 16 Feb 2005 15:05:19 -0300 (EST), favero@grad.ufsc.br
> <favero@grad.ufsc.br> wrote:
> 
>>Hi! I am making some tests here, and i wanna miror all the
>>traffic going to a ip from one interface to another ip.
>>example:
>>all packets going to 64.223.167.100 should be transmitted by
>>ppp0 to internet and by eth2 to the adress 192.168.1.100.
>>Someone know how can i do it using iptables or ip route/ip
>>rule?

-j MIRROR

> Correct if I'm wrong, I'm still learning. Wouldn't this break IP at
> protocol level? The host 192.168.1.100 will disregard the traffic
> because it's not the intended destination... I'm not sure but it seems
> impossible.

Yes, you are right too. See this thread:
http://lists.debian.org/debian-security/2001/11/msg00152.html

Maybe he would like to sniff in the traffic.

-- 
Udv,
   Nandor
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] How can i send the same traffic to 2 different interface

[Kenneth Kalmer]

On Thu, 17 Feb 2005 13:50:09 +0100, Tóth Nándor <nug@sch.bme.hu> wrote:
> Hi!
> 
> Kenneth Kalmer wrote:
> > On Wed, 16 Feb 2005 15:05:19 -0300 (EST), favero@grad.ufsc.br
> > <favero@grad.ufsc.br> wrote:
> >
> >>Hi! I am making some tests here, and i wanna miror all the
> >>traffic going to a ip from one interface to another ip.
> >>example:
> >>all packets going to 64.223.167.100 should be transmitted by
> >>ppp0 to internet and by eth2 to the adress 192.168.1.100.
> >>Someone know how can i do it using iptables or ip route/ip
> >>rule?
> 
> -j MIRROR

Will send the packets back to the destination, not down another route...

> 
> > Correct if I'm wrong, I'm still learning. Wouldn't this break IP at
> > protocol level? The host 192.168.1.100 will disregard the traffic
> > because it's not the intended destination... I'm not sure but it seems
> > impossible.
> 
> Yes, you are right too. See this thread:
> http://lists.debian.org/debian-security/2001/11/msg00152.html

This is good reading, thanks!

> 
> Maybe he would like to sniff in the traffic.
> 
> --
> Udv,
>    Nandor
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
> 


-- 

Kenneth Kalmer
kenneth.kalmer@gmail.com
http://opensourcery.blogspot.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/