This is what worked for me: In order to create a bridge and add 2 i/fs say sis0 sis1 and make sis1 a SPAN port you need to enter the following cmds:
/sbin/ifconfig bridge0 create /sbin/ifconfig bridge0 span sis1 up addm sis0 up While the 'addm' directive adds a normal i/f to a bridge the 'span' directive is used to add a SPAN port i/f. To remove an i/f you would use the 'deletem' directive, unfortunately I don't know what the equivalent directive for a SPAN port i/f is. Hope this helps. On Dec 14, 2007 9:26 PM, jason whitt <[EMAIL PROTECTED]> wrote: > i as well would be intrested in this > > > On 12/14/07, Alexander Papantonatos <[EMAIL PROTECTED]> wrote: > > > > Hi to all. > > > > I've got an embedded pfSense running on a WRAP board w/ 3 i/f. I would > > like to connect an IDS on the 3rd i/f. For this I would like to mirror all > > traffic on one of the other 2 i/fs onto the 3rd i/f where the IDS will be > > connected. I know that FreeBSD's bridge(4) supports SPAN ports via the > > 'addspan'-'delspan' directives of the brconfig(8) cmd. pfSense seems to be > > using ifconfig(8) for bridge manipulation. Does anyone know how to add a > > SPAN port to a bridge via the ifconfig(8) cmd? If this isn't possible is > > there any other way to accomplish this? > > > > -- > > Regards, > > > > Alexander Papantonatos > > > -- Regards, Alexander Papantonatos
