Projects

netmirror

#Net Mirror. Setup your traffic Mirrors to be monitored! IntroductionNetMirror is a networking application that can be used as soft tap. You can define tcpdump filters and actions for that traffic: Redirect traffic between interfaces. Write pcap files. Encapsulate traffic in UDP packets in order ... [More] to forward them to another NetMirror host. NetMirror use Python, Scapy, and runs on Linux. DetailsThere are 3 type of actions that Net Mirror can do with the traffic filtered: Forward to another interface (ex: http traffic from eth0 to eth1) Write pcap file (ex: udp traffic from eth0 to /var/netmirror/udp-packets.pcap) Resend packets to a remote Net Mirror server (ex: forward 10.0.0.0/24 to a remote server) Traffic received by remote servers can be reinjected to any interface. Typical Usages: Track network activity in pcap. Distribute traffic to different IDS servers. Resend traffic between different LANs. Sometimes when you setup Port Mirroring in a switch, you want to easily redistribute traffic to be analyzed by different hosts. The criteria to distribute this traffic could be networks (ex: 192.168.1.0/24 to host1, 192.168.2.0/24 to host2...) or by protocols (ex: http traffic to host1, other traffic to host2...). With Net Mirror you have the flexibility to create complex tcpdump filters that will allow you to redirect what ever you need to any host/interface. [Less]