Is it possible to force mirrored traffic into the Input Chain?
Basically, I had to offload Traffic-Flow Duties onto a CCR1072. It’s adjacent to a Juniper device, which doesn’t have Netflow/JFlow/Traffic-Flow capabilities. The Juniper is mirroring traffic to the CCR1072 via interface sfp-sfpplus3.
The problem is, I didn’t realize that mirrored traffic doesn’t hit the input chain, so the CCR1072 doesn’t pick up the traffic using Traffic-Flow.
Is there a way to force Mirrored traffic into the input chain?