Home / server / Questions / 236503
In Process
syn-
Asked: 2011-02-17 15:18:37 +0800 CST

Need to duplicate UDP packets to multiple destinations via iptables

  • 772

I'm looking to duplicate UDP traffic for SYSLOG and NetFlow data and was hoping to use iptables to do so, but so far I'm not having much luck.

I'm aware of other user space software packages that can accomplish this, but they don't seem very well maintained by their developers, so I'd prefer to avoid them if at all possible.

linux nat iptables

1 Answers

  1. You could use the iptables TEE target as long you have the xt_TEE modules in your kernel. You can duplicate packets incoming in your box and send them to another server in your LAN.

    Es. to duplicate all incoming dns requests and send them to server 192.168.0.10

    iptables -t mangle -A PREROUTING -i eth0 -p udp --dport 53 -j TEE --gateway 192.168.0.10

    Another solution is to use a userspace program as http://code.google.com/p/port-mirroring/

    • 7