Thank you. So assuming we use rspan, how are the packets encapsulated, if at all? For the project I'm working on, I have to try and cater for both scenarios as I'm not yet sure whether a port mirror or network tap is going to be used.
On 15 July 2014 18:19, Luca Deri <[email protected]> wrote: > Chandru, > no. A tap is a physical device pretty basic that gives you a copy of the > packet and that’s it. If you need to deliver packets remotely (and not to > the machine physically attached to the tap) you need something like rspan ( > http://en.wikipedia.org/wiki/Port_mirroring) > > Luca > > On 15 Jul 2014, at 19:14, Chandru <[email protected]> > wrote: > > Thanks for the prompt response Luca. So is encapsulation necessary only if > the mirrored traffic has to traverse more than one LAN segment? > > regards, > Chandru > > > On 15 July 2014 18:08, Luca Deri <[email protected]> wrote: > >> Chandru >> packets are not encapsulated at all as the mirror gives you a copy of the >> original packet. >> >> I have not received any contact email. Please drop me a mail and I will >> assist you >> >> Regards Luca >> >> On 15 Jul 2014, at 18:52, Chandru <[email protected]> >> wrote: >> >> > Hi all, >> > >> > Quite a basic question, but couldn't easily find an answer while >> researching. When a port mirror or network tap is setup, in what format are >> the packets encapsulated? Is it using GRE as specified in RFC2784? >> > >> > I also have a question regarding buying an ntop based capture >> appliance? Who should I contact? I emailed the contact listed on the web >> page but didn't get a response. >> > >> > regards, >> > Chandru >> > >> > _______________________________________________ >> > Ntop-misc mailing list >> > [email protected] >> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
