Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have some data going from Point A to Point B. I have a SPAN monitor set up to a monitoring device C.

To recreate some real world scenarios, I want to filter out all traffic which is a certain type (H.323 VoIP Signaling Packets) so that C sees a subset of the information that is flowing from A to B.

What would the easiest way to do this be? I assume I would need a computer with 2 NIC cards and some software to examine each packet and chuck out the H.323 VoIP packets?

share|improve this question

2 Answers 2

up vote 3 down vote accepted

You can do it with almost any hardware and software you want. You do need a PC with 2 NIC cards. Personally, I'd use Linux's software bridging and ebtables to enforce the filtering.

share|improve this answer

you could just use a capture filter in wireshark...

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.