On Wed, Apr 03, 2013 at 12:41:45PM -0300, Fernando Gont wrote: > What do you mean by "packet capture"-based? That the interface must be > put nto promiscuous mode? Something else?
If your router is not a *nix you need to get the packets to another box. If you don't route centrally but somewhere outside of your DC, it might be hard to replicate just broadcast traffic of the attached VLANs to your DC. So you might need a box there. And you need to put that box into all VLANs, which might not be desired from a security point of view. Kind regards Philipp Kern
