-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi ram,

ram wrote:
> Hi all
> 
> how can i make debian as a network tap with 3 ethernet cards

a tap works passively which cannot be done with NICs... But you can
create a bridge instead.

> on for network in and one for network out
> third one is connected to another debian with ntop to hear the traffic

I did that a while back with one difference. On the 'tap' I had a small
php based web frontend to start/stop tcpdump and to download the
captured data. If you like, I could send you a little .tar.gz with this
web-frontend (or upload it to my webserver).

> is this possible  solution.

Don't know if tcpdump can send data to another host, but I know _know_
that one can use tcpdump as a remote adapter in Wildpackets' OmniPeek.
Maybe they offer some documentation (www.wildpackets.com).

> if yes.. any resources for the same

- From the bridge-utils package:

"Description: Utilities for configuring the Linux ethernet bridge
 This package contains utilities for configuring the Linux ethernet
 bridge in Linux 2.4 or later. The Linux ethernet bridge can be used
 for connecting multiple ethernet devices together. The connecting is
 fully transparent: hosts connected to one ethernet device see hosts
 connected to the other ethernet devices directly."

> or any suggestion will be welcome
> 
> ram

Best regards,
Fabian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF3dU3OG44jO5akmwRAoTCAJ9WGU5UvbAJahV1BSEJziDwFAXmbACcCV9n
CYM/dIWILtLmuJeK2wSQU0c=
=yr/x
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to