Markus Einarsson
2018-01-05 18:56:08 UTC
Hi,
In my current port mirroring setup I'm struggling with asymmetric VLAN
tagging in the mirrored traffic. All outgoing packets are VLAN tagged, but
incoming packets are untagged. This confuses ntopng, of course, since a
communicating host is registered twice, see below:
192.168.140.20 (incoming packets)
***@1002 (outgoing packets)
Is there any way to let ntopng or nProbe ignore the VLAN tags completely,
to be able to merge the incoming and outgoing data streams? If not, is
there any way to solve this on the Linux host instead?
Regards,
Markus Einarsson
In my current port mirroring setup I'm struggling with asymmetric VLAN
tagging in the mirrored traffic. All outgoing packets are VLAN tagged, but
incoming packets are untagged. This confuses ntopng, of course, since a
communicating host is registered twice, see below:
192.168.140.20 (incoming packets)
***@1002 (outgoing packets)
Is there any way to let ntopng or nProbe ignore the VLAN tags completely,
to be able to merge the incoming and outgoing data streams? If not, is
there any way to solve this on the Linux host instead?
Regards,
Markus Einarsson