[73066] in North American Network Operators' Group
Re: Legal intercept - 3550
daemon@ATHENA.MIT.EDU (Owen DeLong)
Wed Aug 11 13:09:04 2004
Date: Wed, 11 Aug 2004 10:08:17 -0700
From: Owen DeLong <owen@delong.com>
To: Stefan Baltus <stefan.baltus@xbn.nl>, nanog@merit.edu
In-Reply-To: <20040811143724.GA25297@xbn.nl>
Errors-To: owner-nanog-outgoing@merit.edu
--==========22A7EEFE66228BE6040A==========
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
You might be able to do what yo want by hard-coding the CAM entries in the
catalyst so that it forwards the MAC addresses you're concerned about to
the port in question, but, that may or may not achieve what you want,=20
depending
on the makeup of the MAC addresses in the 300mbps traffic and whether there
is a limited number of MAC addresses that apply only to the traffic that
interests you (destination field only).
Otherwise, you really need to feed this off to anothger GE interface and
use libpcap (snoop, tcpdump, ethereal) to filter stuff into a file.
Owen
--==========22A7EEFE66228BE6040A==========
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (Darwin)
iD8DBQFBGlKBn5zKWQ/iqj0RAguiAJ9k85VX2m4RWqLZnb7PyBbiwk2FIACfZoRj
xCG9KWUvjjZoJVh+sAJoK0k=
=EwuG
-----END PGP SIGNATURE-----
--==========22A7EEFE66228BE6040A==========--
