TC Mirror

mirror.sh

#!/bin/bash
SRC=vnet25
DST=dummy0
ifconfig $DST up
case $1 in
start)
echo  add mirror ingress traffic
tc qdisc add dev $SRC ingress
tc filter add dev $SRC parent ffff: \
    protocol all \
    u32 match u8 0 0 \
    action mirred egress mirror dev $DST
echo add mirror egress traffic
tc qdisc add dev $SRC handle 1: root prio
tc filter add dev $SRC parent 1: \
    protocol all \
    u32 match u8 0 0 \
    action mirred egress mirror dev $DST
;;
stop)
echo  delete mirror ingress traffic
tc qdisc del dev $SRC ingress
echo delete mirror egress traffic
tc qdisc del dev $SRC handle 1: root prio
;;
esac

Links

• https://backreference.org/2014/06/17/port-mirroring-with-linux-bridges/