Finally dug up my account details... Anyway, we have a dire need to monitor our network, and for some reason or another, MikroTik's TrafficFlow doesn't want to return the MAC addresses to our Ntop box. We've considered buying a tap, but they're rather pricey. We do have an RB1100 at our disposal though. I just need to somehow mirror 7 ports worth of traffic to a single port. Is there any effective way to do this? If so, how would one go about doing it?
Currently I have 5 ports bridged, 2 through 7. Port 2 is mirrored to port one. Port 2 plugs directly into our gateway router (which is an x86 mikrotik). I can pickup trivial bits of traffic on the test bench, but nothing like I would hope for.