Jan Reimes wrote:
> I want to test the following setup: Here i have a PC (Debian) with 3
> ethernetcards (eth0, 1, 2). eth0&1 are influenced by netem qdiscs and
> bridged with brctl. There is only one test-device on eth1 and eth2
> each, until here, this work fine.
>
> Now the traffic of these two test-devices going through this bridge
> should be captured from a second PC (Windows) via eth2, which isn't
> involved in the network of eth0&1. When adding eth2 to the existing
> bridge, this of course does not work, because brctl handles ethernet
> traffic like a switch, and not like a hub.
>
> Is there any way to get the traffic to eth2 (doesn't matter if on IP
> or ethernet layer) mirrored or duplicated, so that it can be captured
> (with wireshark for example) like both testdevices are connected
> through a hub?
I don't have the answer to your question, but I wanted to mention the
LARTC resource, in case you hadn't found it yet. They provide a HOWTO
and a mailing list.
http://lartc.org/