Hello,
I'd like to ask if there is an "intended" way to configure port-mirroring via LuCI in OpenWRT 24.10?
I did install the "port-mirroring" package but did not see any additional option pop-up in devices or interfaces. I'm not sure if that package is currently maintained as the github repo is archived.
I'm basically playing with an EdgeRouterX and an RPI4 to setup an IDS based on ZEEK or SNORT, just to get warm with the topic and eventually deploy it at home.
Thanks and Best Regards.
It seems that there is none.
Everything is complicated, and apparently it is considered that for SOHO no one needs such a thing, but for enterprise there are ready-made proprietary solutions.
Only one path worked for me in my topic: Mirroring traffic on MikroTik RB750Gr3 running OpenWrt 24.10.0 - #2 by pavelgl
And I couldn't cope with adding those commands to the init.d startup or crontab @reboot so that it worked.
1 Like
Thank you. That sure is a pity. I'll check out that option is well and eventually flash back to EdgeOS for my tests.
Another is nftables dup, you can filter what you forward.