How can I filter packets from a port monitor?

Posted by engineerchuan on Server Fault See other posts from Server Fault or by engineerchuan
Published on 2011-11-12T23:33:19Z Indexed on 2011/11/13 1:54 UTC
Read the original article Hit count: 533

Filed under:
|
|

I have some data going from Point A to Point B. I have a SPAN monitor set up to a monitoring device C.

To recreate some real world scenarios, I want to filter out all traffic which is a certain type (H.323 VoIP Signaling Packets) so that C sees a subset of the information that is flowing from A to B.

What would the easiest way to do this be? I assume I would need a computer with 2 NIC cards and some software to examine each packet and chuck out the H.323 VoIP packets?

Thanks!

© Server Fault or respective owner

Related posts about monitoring

Related posts about voip