[Openswan Users] "Promisc" trafic over tunnel

Peter McGill petermcgill at goco.net
Wed Jan 14 10:03:42 EST 2009


Well IPSec (not just Openswan but the protocol in general) won't let you 
do that. It only transfers packets over the tunnels which match the 
tunnels source & dest subnets, and works with normal routing methods to 
do it. What your suggesting won't work with that. You could instead use 
tcpdump to capture the packets to a file, then periodically rotate the 
file and send it to the other host over the tunnel. Where you could then 
use tcpdump again to view the packets in the file. What you transfer the 
file with is up to you, sftp, ftps, ftp, etc...

Peter

Sergio Cioban Filho wrote:
> Hi all,
> 
> I'm trying redirect all "promisc" trafic captured on eth2 interface over 
> ipsec tunnel.
> That is my scenario:
> 
> (HUB)<------>(eth2:Server:eth0=ipsec0)<---------->(eth0=ipsec0:Client)
> 
> I want redirect (or mirroring) all traffic (sniffed) on eth2 server 
> interface to client ipsec0 interface.
> When I run tcpdump on ipsec0 client interface, the result must be same 
> of the eth2 server interface.
> 
> Any idea?
> 
> Thanks,
> Regards,
> ---
> Sérgio Cioban Filho
> | Tecnólogo em Gestão de TI
> | Linux Professional Institute Certified - Level 1
> ------------------------------------------------------------
> | Linux - Servidores - Firewall - VPN
> | Virtualização - VoIP - ShellScript - C - PHP
> | http://cioban.googlepages.com
> | +55 48 9989-8733
> ------------------------------------------------------------
> ..:: Seja livre, use LiNuX!! ::..
> ------------------------------------------------------------
> Vendo GOL G3 PLUS 1.0 8V - 4 P - 2002 - Branco - COMPLETÍSSIMO - R$ 20.200
> http://cioban.googlepages.com/vendogolg38v
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan: 
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155


More information about the Users mailing list