I am presented with a challenge of monitoring traffic from the site that is connected to the rest of the network by 2 fiber uplinks. Links are connected to 2 separate core routers; routing is done by OSPF.
Since OSPF redistributes traffic by round robin-like pattern, there is no way that TCP sessions will be maintained on the same link the whole duration, so a regular port mirroring won't work.
Ideally I need to use a monitoring appliance with 2x1000TX ports (transparent bridge), but I am open for suggestions.
Thanks!
Since OSPF redistributes traffic by round robin-like pattern, there is no way that TCP sessions will be maintained on the same link the whole duration, so a regular port mirroring won't work.
Ideally I need to use a monitoring appliance with 2x1000TX ports (transparent bridge), but I am open for suggestions.
Thanks!