Is it possible to do port mirroring on a Mikrotik for monitoring purposes? I see there’s a interface ethernet mirror command but I can’t figure out how to use it.
Keefe
Documentation is a little thin on this subject. I found this is a config file:
/interface ethernet mirror
set mirror-port=none source-port=none
Hope this offers some clues.
Kind regards
Andrew
That doesn’t seem to work:
/interface ethernet mirror> set mirror-port=ether5 source-port=LAN
bad argument name mirror-port (line 1 column 5)
does it have to be a port thats in a switch config ?
This is the command syntax. I tried it on an RB493AH with ROS 3.27 but it doesn’t appear to be working yet. I tried bridging the ports, slaving the ports, leaving them not bridged and not slaved.
“interface ethernet mirror set source-port=ether8 mirror-port=ether9”
source-port does not support being mirrored
It looks like a future command and one I look forward to.
Tom
Im looking for the same functionality. Can you please update us on the topic in case you have any new information?! Thank you.
This is supported on some RouterBOARDs that have appropriate switch chips that support port mirroring. For example RB450G and RB750
Very helpful! Cheers!
This is supported on some RouterBOARDs that have appropriate switch chips that support port mirroring. For example RB450G and RB750
Would it be possible for you to extend this feature to any kind of network interfaces using software instead of the hardware chips?
Keefe
that would take too much resources! imagine what this does - it mirrors all traffic!
You don’t think a dual/quad core x86 box or a dual processor multi-core x86 box wouldn’t be able to handle that? I have low end 8 port HP managed switches that can do port mirroring.
Keefe
those switches have switch chips, they don’t have operating systems doing this in software!
What specific chipset is required to make this happen? Are there and pci cards available with this chipset?
RouterBOARD 750 and 450 have this switch chip.
What is the exact name of the chipset/chip needed? Or, what is the exact technology these chips must have to support this?
I would like to find out if there are and pci or pcie based network cards that have this chipset or support this echnology.
RouterOS doesn’t support any other chips
Just because I havent had time to try it..
Is it both ingress and egress ??
FYI…
Both Ingress and Egress as well as injection ARE supported !!! Yahoo !!!
I am uning the 450G as a net tap for a FaceTime box..
WORKS GREAT !!!
Setup was about 15 Min !!
I am using an RB450 and the mirror command does not seem to be available under the ethernet menu?
Am I missing a required package?
Software version is 4.11.
Check under “/interface ethernet switch print”. If the type is “ICPlus175C”, then mirroring is not supported.