MikroTik

Is it possible to do port mirroring on a Mikrotik for monitoring purposes? I see there's a interface ethernet mirror command but I can't figure out how to use it.

Keefe

Documentation is a little thin on this subject. I found this is a config file:
Hope this offers some clues.

Kind regards

Andrew

That doesn't seem to work:

/interface ethernet mirror> set mirror-port=ether5 source-port=LAN
bad argument name mirror-port (line 1 column 5)

does it have to be a port thats in a switch config ?

This is the command syntax. I tried it on an RB493AH with ROS 3.27 but it doesn't appear to be working yet. I tried bridging the ports, slaving the ports, leaving them not bridged and not slaved.

"interface ethernet mirror set source-port=ether8 mirror-port=ether9"

source-port does not support being mirrored

It looks like a future command and one I look forward to.

Tom

Im looking for the same functionality. Can you please update us on the topic in case you have any new information?! Thank you.

This is supported on some RouterBOARDs that have appropriate switch chips that support port mirroring. For example RB450G and RB750

Very helpful! Cheers!

This is supported on some RouterBOARDs that have appropriate switch chips that support port mirroring. For example RB450G and RB750

Would it be possible for you to extend this feature to any kind of network interfaces using software instead of the hardware chips?


Keefe

that would take too much resources! imagine what this does - it mirrors all traffic!

You don't think a dual/quad core x86 box or a dual processor multi-core x86 box wouldn't be able to handle that? I have low end 8 port HP managed switches that can do port mirroring.

Keefe

those switches have switch chips, they don't have operating systems doing this in software!

What specific chipset is required to make this happen? Are there and pci cards available with this chipset?

RouterBOARD 750 and 450 have this switch chip.

What is the exact name of the chipset/chip needed? Or, what is the exact technology these chips must have to support this?

I would like to find out if there are and pci or pcie based network cards that have this chipset or support this echnology.

RouterOS doesn't support any other chips

Just because I havent had time to try it..

Is it both ingress and egress ??

FYI...

Both Ingress and Egress as well as injection ARE supported !!! Yahoo !!!

I am uning the 450G as a net tap for a FaceTime box..

WORKS GREAT !!!!

Setup was about 15 Min !!

I am using an RB450 and the mirror command does not seem to be available under the ethernet menu?
Am I missing a required package?
Software version is 4.11.

Check under "/interface ethernet switch print". If the type is "ICPlus175C", then mirroring is not supported.

It is type IC-Plus-175D.

I was able to use command:
/interface ethernet switch set numbers=0 mirror-source=ether2 mirror-target=ether5

Does this accomplish the port mirroring? I was not able to find any documentation anywhere.

Yes, port mirroring is supported on this chip. More information: http://wiki.mikrotik.com/wiki/Switch_Chip_Features

I still didn't find a mirror command under the ethernet menu (as shown in above posts)?
Is there any good documentation out there for supported commands?
Did my sample command look correct?
Thanks!

Yes,is correct. Please describe the problem you are experiencing.

Thank you.
I was just trying to confirm command syntax since I could not find reference and this topic thread indicated the command was "interface ethernet mirror set source-port=ether8 mirror-port=ether9".

I believe all is working OK. Is there a way to confirm the mirroring activity?

Hi All,

I was able to set one of the ports as mirror ports, I am trying to set other two ports too as mirror ports for the same source port, Is that possible?

Could someone help me with this?

Regards,
Kiran G

Could some one help me with configuring the mirror ports? I want to have three destination ports for the same source port? Is that possible?