I have three interfaces. What I would like to do is on third int (int3) duplicate int1. So every traffic that is going trough int1 to go over int3 too. Is this possible?
I’m having problem with spam boots and I would like to sniff outgoing int on PC machine with ethereal connected on int3 without stopping or interrupting normal outgoing traffic…
Thanks in advance.
Running the ‘Packet Sniffer’ tool and streaming it to the PC not appropriate?
the packet sniffer tool is good except that it doesn’t always stay running - and it requires a manual start (cannot schedule).
bridging that eth1 with eth3 should replicate all packets to both ports I believe.
using a switch with a monitor / mirror port is the best option. Next might be using a hub between MT and the internet.
Sam
Yeap, my next step. Even though manageble switches are not so cheap I think i will manage. I just went to IT stores to try to find some hubt. Mission imposible. Time eat them 
I matter of bridge, isn’t bridge something like switch? It has MAC tables and separates collision domain? Anyway thanks for info guys…
bridge is like switch, thats why in ROS one can add ports to bridge 