On 15 Jul 2014, at 19:22, Chandru <[email protected]> wrote:
> Thank you. So assuming we use rspan, how are the packets encapsulated, if at > all? For the project I'm working on, I have to try and cater for both > scenarios as I'm not yet sure whether a port mirror or network tap is going > to be used. > Neither of them deliver packets remotely. You need tricks like remote span, that usually encapsulate packets on GRE tunnels Luca > > On 15 July 2014 18:19, Luca Deri <[email protected]> wrote: > Chandru, > no. A tap is a physical device pretty basic that gives you a copy of the > packet and that’s it. If you need to deliver packets remotely (and not to the > machine physically attached to the tap) you need something like rspan > (http://en.wikipedia.org/wiki/Port_mirroring) > > Luca > > On 15 Jul 2014, at 19:14, Chandru <[email protected]> > wrote: > >> Thanks for the prompt response Luca. So is encapsulation necessary only if >> the mirrored traffic has to traverse more than one LAN segment? >> >> regards, >> Chandru >> >> >> On 15 July 2014 18:08, Luca Deri <[email protected]> wrote: >> Chandru >> packets are not encapsulated at all as the mirror gives you a copy of the >> original packet. >> >> I have not received any contact email. Please drop me a mail and I will >> assist you >> >> Regards Luca >> >> On 15 Jul 2014, at 18:52, Chandru <[email protected]> >> wrote: >> >> > Hi all, >> > >> > Quite a basic question, but couldn't easily find an answer while >> > researching. When a port mirror or network tap is setup, in what format >> > are the packets encapsulated? Is it using GRE as specified in RFC2784? >> > >> > I also have a question regarding buying an ntop based capture appliance? >> > Who should I contact? I emailed the contact listed on the web page but >> > didn't get a response. >> > >> > regards, >> > Chandru >> > >> > _______________________________________________ >> > Ntop-misc mailing list >> > [email protected] >> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
