Forum Discussion

rodquin_211279's avatar
rodquin_211279
Icon for Nimbostratus rankNimbostratus
Jul 14, 2015

Logging traffic from span port

Hello,   I'm trying to log traffic coming from a SPAN port. The traffic is arriving properly to the F5 (if I do a tcpdump in the interface, I can see the traffic) but for some reason the F5 is no...
deployment
log
mirror
span
traffic
  • rodquin_211279's avatar
    rodquin_211279
    Icon for Nimbostratus rankNimbostratus
    Jul 14, 2015
    Hello Steigman, First of all thank you very much for your quick response. :) What I want to do is the opposite thing, I mean, I want the F5 to act like an IDS. The F5 is receiving traffic from a SPAN port and I just want to generate an alert if it detects a web attack. Thank you very much. Regards.