Span setup advice for maltrail test
-
Hi all!
I am planning to test maltrail https://github.com/stamparm/maltrail as a little project but I am not sure what could be the right setup so I am looking for some advises..Here is my setup:
/ Internet / – | ISP ROUTER | --(direct connexion) -- |pFsense|
|
|
|
- port1 switch
|
- port 2 switch ---- | Proxmox ve |(sorry for the bad drawing..)
Since I want to mirror the traffic, I guess I have to port mirror the port1 switch on let say the port3 on the switch
Then, since I use proxmox, I can create a vm with a dedicated nic on the proxmox server and then link this dedicated interface to the port 3, like this:/ Internet / -- | ISP ROUTER | --(direct connection) -- |pFsense|
|
|
|
- port1 switch
|
- port 2 switch --------------- eth0 (bridge br0) | |
| | Proxmox ve |
- port 3 (mirror of port 1)--- eth1---------------- | |I am pretty sure I can make it work like this but does it sounds right to you? Can you share other solution to achieve my goal?
Any ideas/suggestions will be very appreciated :)
Thanks