Re: Redirecting ports in a bridge

["Javier Prieto Martínez" <javier.prieto.ext@juntadeandalucia.es>]

I'm using tcpdump for testing, but my appliance has it's own Java client 
for that purpose.


Marc Cozzi escribió:
> Jan,
>
> Can I ask what you are using for traffic logging
> on your bridge? I am in need of fairly decent accounting
> software for all traffic passing through the bridge.
> HTTP, P2P, SSH etc. Bytes, time, IP# and so forth.
>
> Regards,
>
>   --marc
>
>
>   
>> -----Original Message-----
>> From: netfilter-owner@vger.kernel.org 
>> [mailto:netfilter-owner@vger.kernel.org] On Behalf Of Javier 
>> Prieto Martínez
>> Sent: Friday, April 18, 2008 7:41 AM
>> To: Jan Engelhardt; netfilter@vger.kernel.org
>> Subject: Re: Redirecting ports in a bridge
>>
>> I need the bridge because the appliance is supposed to be 
>> totally trasparent to the network, as its main use is logging traffic.
>>
>> It just has an IP address for administration purposes, but it 
>> doesn't really need it. Anyway, I can disable bridging as 
>> it's an appliance with a closed configuration.
>>
>>
>>
>> Jan Engelhardt escribió:
>>     
>>> On Friday 2008-04-18 12:55, Javier Prieto Martínez wrote:
>>>   
>>>       
>>>>>   
>>>>>       
>>>>>           
>>>> You're right. I'll try again:
>>>>
>>>> * LAN1 (192.168.1.0/22)
>>>>
>>>> [CLIENTS]--- [ROUTER (.7)]
>>>>
>>>>
>>>> * LAN2 (192.168.2.0/22)
>>>>
>>>> [ROUTER (.7)] -- [APPLIANCE (.40)] -- SERVERS (.1&.2)
>>>>
>>>>     
>>>>         
>>>>> IF you do bridge, then despite cabling being correct, you 
>>>>>           
>> get a NAT 
>>     
>>>>> shortcircuit: jengelh.medozas.de/images/dnat-mistake.png
>>>>>   
>>>>>       
>>>>>           
>>>> That's probably the problem, as far as I've seen with TCPDump. The 
>>>> point is, how can I fix that shortcut?
>>>>     
>>>>         
>>> You do not seem to need a bridge.
>>> --
>>> To unsubscribe from this list: send the line "unsubscribe 
>>>       
>> netfilter" 
>>     
>>> in the body of a message to majordomo@vger.kernel.org More 
>>>       
>> majordomo 
>>     
>>> info at  http://vger.kernel.org/majordomo-info.html
>>>
>>>   
>>>       
>> --
>> To unsubscribe from this list: send the line "unsubscribe 
>> netfilter" in the body of a message to 
>> majordomo@vger.kernel.org More majordomo info at  
>> http://vger.kernel.org/majordomo-info.html
>>
>>     
>
>