From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pd0-f180.google.com (mail-pd0-f180.google.com [209.85.192.180]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 724C521F1D5 for ; Tue, 22 Oct 2013 16:12:41 -0700 (PDT) Received: by mail-pd0-f180.google.com with SMTP id p10so25192pdj.11 for ; Tue, 22 Oct 2013 16:12:40 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:cc:subject:message-id:in-reply-to :references:mime-version:content-type:content-transfer-encoding; bh=F7x75bb9M2AMj3h+MNZ5ApDiWRPniaiVghxo5woTZBM=; b=aiPeQSGlKck3N+zb0N6d1WZu0h7Pe5+OVOrEfRJSZ/0pzP0C/OO+Nee1dNeYibiT6d +kAoVy9JadYQEk3ZlNEkNHQBNZZ0HfQYAXloE/dXTVM/Du3I32l2/YjCw+o0kI3Y74WV AAT/a6UWu7EB9Jl5A8FAU5WhhTf6AmZeVyddd1/WLt3LxPbQjL5idGch98YaNY5V0t8j o9wM6S77/DRNeyz9CdunkihiXV4XAuDjZ/UcCiKhJzoKNqITcBgVPyMIM/4x7AbTWydK BP0aCuRptzPg8DzxMQyM429MjtP9RTvlPMBWryxiXmNpxjMkLLiClEv4lrLjRBHDYoPm NVSw== X-Gm-Message-State: ALoCoQls7ALFrVp3E2loWqTeHdlaoJX7KolKyaG13uod2Umm4AbRbbU/MkVDZ/2IwJKHadvya6Gx X-Received: by 10.66.122.66 with SMTP id lq2mr71501pab.183.1382483560829; Tue, 22 Oct 2013 16:12:40 -0700 (PDT) Received: from nehalam.linuxnetplumber.net (static-50-53-83-51.bvtn.or.frontiernet.net. [50.53.83.51]) by mx.google.com with ESMTPSA id tz3sm216450pbc.20.2013.10.22.16.12.39 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Tue, 22 Oct 2013 16:12:39 -0700 (PDT) Date: Tue, 22 Oct 2013 16:12:37 -0700 From: Stephen Hemminger To: Dave Taht Message-ID: <20131022161237.59a817f8@nehalam.linuxnetplumber.net> In-Reply-To: References: <20131021183429.4c79d8d8@nehalam.linuxnetplumber.net> X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.10; x86_64-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] cerowrt 3.10.17-3 released X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2013 23:12:41 -0000 With TC you can apply an action to packets coming in. One of those actions is mirred (not a typo) which mirrors the packet to another device. There is both mirror and redirect possible. Jamal invented this years ago, but actions are not widely used. Inside Vyatta CLI wrappers, the port-mirroring capability converts to tc commands. For example doing SPAN equivalent from eth0 to eth1 is: tc filter add dev eth0 parent ffff: \ protocol all prio 10 u32 \ match u32 0 0 flowid 1:1 \ action mirred egress mirror dev eth1 The actions apply to a filter, and this seemed to be a workable (match all) filter.