[Bridge] bridge in 'hub' mode possible?

Roman Chertov rchertov at purdue.edu
Tue Jan 18 17:35:36 PST 2005

> -----Original Message-----
> From: Jody Belka,,,,knew at pimb.org [mailto:jmb at mccarroll.org.uk] On
> Of Jody Belka
> Sent: Tuesday, January 18, 2005 8:33 PM
> To: bridge at osdl.org
> Cc: Roman Chertov
> Subject: Re: [Bridge] bridge in 'hub' mode possible?
> On Fri, Dec 03, 2004 at 11:48:35AM -0500, Roman Chertov wrote:
> > > I wonder if it would be worth to introduce some kind of "monitor
> > > interface" for a brigde (as can be found on switches, don't know
> > > "monitor port" would be the correct term for it).
> > >
> > I have already made one for the 2.4.20 kernel module and the 1.0.4
> > bridge-utils.  Since I was making this for the Emulab testbed I also
> > to change the src/dst MACs that were going to the tap; otherwise,
> > underlying switch would drop the mirrored packets as their MAC's
> > not registered on the VLAN where the tap sat.
> >
> > If people have any interest in this I can share with the code.
> I'd be interested in something like this. Maybe something along the
> of:
> brctl addtap <bridge> <device>    # only allow 1 tap? i'd guess so,
but if
> not
> brctl deltap <bridge>             # then add a <device> param to

The tap that I made, allows for only one tap and I have not implemented
the tap removal function.  But it should be trivial to do so.  Also when
the tap is configured the MAC address of the tap has to be specified.
(this was done to get around a certain problem with a switch on

If you want the source code shoot me an email.


> This would be very useful for me, as it would make hooking up snort
> to a linux bridge very nice and easy.
> J
> --
> Jody Belka
> knew (at) pimb (dot) org

More information about the Bridge mailing list