[Click] Recommendation for network TAPs

Roman Chertov rchertov at cs.ucsb.edu
Tue Feb 24 12:49:46 EST 2009


You can actually use Click to act as a tap.

PollDevice(eth1)->t1 :: Tee
                 ->Queue
                 ->ToDevice(eth2);

PollDevice(eth2)->t2 :: Tee
                 ->Queue
                 ->ToDevice(eth1);

mirror::Queue->ToDevice(eth3);
t1[1]->mirror;
t2[1]->mirror;


Then just have a node attached to eth3 that will receive and log the 
packets.  Alternatively, you can use ToUserDevice element.  In that 
case, you will just need a user level app to read/log the packets from 
ToUserDevice.  Using ToUserDevice will enable you to use the same 
machine for logging and tapping.

Roman

Latency Buster wrote:
> In addition to traffic shaping, I plan to use click for doing traffic
> correlation. I am being questioned regarding the nature of taps and
> what's a good place to purchase them would be.
> 
> So, here goes my question to the click community: What kind of
> networks taps (optical and copper) would you folks recommend that does
> faithful packet mirroring and is extremely reliable? We would be
> tapping from our IT infrastructure and reliability is a pretty high
> concern here.
> 
> Thanks!
> _______________________________________________
> click mailing list
> click at amsterdam.lcs.mit.edu
> https://amsterdam.lcs.mit.edu/mailman/listinfo/click
> 



More information about the click mailing list