服务器(A)正在向任务关键警报系统(B)发送tcp包。
我的服务器(C)需要侦听此通信量并生成触发警报的统计信息。我不想成为中间人,因为警报需要触发,即使我的服务器关闭。
是否有一种设备可以转发所有针对B的流量,但将其镜像到C?有什么解决方案可以让我不自己转发就能听到流量?
编辑:我既不控制服务器A也不控制服务器B。
发布于 2016-11-03 07:42:12
iptables扩展区:
The TEE target will clone a packet and redirect this clone to another machine on the local network segment. In other words, the nexthop must be the target, or you will have to configure the nexthop to forward it further if so desired.
--gateway ipaddr
Send the cloned packet to the host reachable at the given IP address. Use of 0.0.0.0 (for IPv4 packets) or :: (IPv6) is invalid.
To forward all incoming traffic on eth0 to an Network Layer logging box:
-t mangle -A PREROUTING -i eth0 -j TEE --gateway 2001:db8::1 https://serverfault.com/questions/812900
复制相似问题