Forum Discussion

gjrjf_127445's avatar
gjrjf_127445
Icon for Nimbostratus rankNimbostratus
Jan 06, 2004

Port Mirror Data Capture

I am setting up a system to perform data mining and statistical analysis of in-band traffic through the F5 for particular ports and vIPs. We're planning to use the port mirroring capabilities within the F5 to clone the traffic to a data capture and analysis system (similar to an intrusion detection style implementation). Is there a recommended method or best practice to capture the cloned data from the mirrored data stream?
  • DevCentral is designed for support in developing applications using iControl to manage/monitor F5 devices. What you are asking is a best practice question on deploying and using a BIG-IP. Your best best for advice on deployment of your device is to visit the Solutions Center on our corporate website or contact Tech Support directly.

     

     

    If you end up developing an iControl application to manage your data capturing and analysis process please let us know of any development questions and possible outcomes of the project.

     

     

    F5 Solution Center

     

    http://www.f5.com/solutions/

     

     

    F5 Technical Support

     

    Email: support@f5.com

     

    Phone: 206-272-6888

     

    Web: http://www.f5.com/support/

     

    AskF5: http://tech.f5.com/