Posted inNetwork
Configuring Traffic Mirroring on Linux with tc-mirred: Copy Packets to IDS/IPS Without Disrupting Service
Traffic Mirroring with tc-mirred lets you copy all packets to a passive IDS/IPS device without disrupting production traffic. This guide walks through configuring both ingress and egress mirroring step by step, along with tips for selective traffic filtering and automating the setup with a systemd service.