1

I have some data going from Point A to Point B. I have a SPAN monitor set up to a monitoring device C.

To recreate some real world scenarios, I want to filter out all traffic which is a certain type (H.323 VoIP Signaling Packets) so that C sees a subset of the information that is flowing from A to B.

What would the easiest way to do this be? I assume I would need a computer with 2 NIC cards and some software to examine each packet and chuck out the H.323 VoIP packets?

2 Answers 2

3

You can do it with almost any hardware and software you want. You do need a PC with 2 NIC cards. Personally, I'd use Linux's software bridging and ebtables to enforce the filtering.

1

you could just use a capture filter in wireshark...

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .