How can I filter packets from a port monitor?
        Posted  
        
            by 
                engineerchuan
            
        on Server Fault
        
        See other posts from Server Fault
        
            or by engineerchuan
        
        
        
        Published on 2011-11-12T23:33:19Z
        Indexed on 
            2011/11/13
            1:54 UTC
        
        
        Read the original article
        Hit count: 649
        
I have some data going from Point A to Point B. I have a SPAN monitor set up to a monitoring device C.
To recreate some real world scenarios, I want to filter out all traffic which is a certain type (H.323 VoIP Signaling Packets) so that C sees a subset of the information that is flowing from A to B.
What would the easiest way to do this be? I assume I would need a computer with 2 NIC cards and some software to examine each packet and chuck out the H.323 VoIP packets?
Thanks!
© Server Fault or respective owner