Traffic Mirroring with Linux Tc

David Waiting
May 24, 2020 · 10 min read
Photo by Jack Hodges on Unsplash

Traffic mirroring is a useful tool for debugging protocol level issues. It’s particularly useful for network elements which may have limited logging or other tooling that could be used for troubleshooting. Traditionally, traffic mirroring was performed by a technique called Switched Port Analyzer (SPAN) at the physical switch. In this case, the switch copies network traffic from certain ports or VLANs to another port where the…