[no subject]

[Alan Lee <dbpalan@xxxxxxxxx>]

I try to use xtables TEE for packet mirroring to another port of
localhost but failed -- no error in the command but no packets
received in the mirrored port.

Original Packet:
Destination: 192.168.0.1
Destination Port: 514

I want to create a mirror packet with destination port 516.

Attempt 1 (Modified from well known example of TEE):

iptables -A PREROUTING -t mangle -p udp -d 192.168.0.1/32 --dport 514
-j TEE --gateway 127.0.0.1
iptables -A PREROUTING -t nat -p udp -d 192.168.0.1/32 --dport 514 -j
DNAT --to 127.0.0.1:516

Attempt 2 (Use an alias interface to (try to) avoid special handling
for loopback interface, if any):

ifconfig eth0:0 192.168.0.2 netmask 255.255.255.255 up
iptables -A PREROUTING -t mangle -i eth0 -p udp -d 192.168.0.1/32
--dport 514 -j TEE --gateway 192.168.0.2
iptables -A PREROUTING -t nat -i eth0:0 -p udp -d 192.168.0.1/32
--dport 514 -j DNAT --to 192.168.0.2:516

Please advice, thanks!

Alan
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html