Chandru, no. A tap is a physical device pretty basic that gives you a copy of the packet and that’s it. If you need to deliver packets remotely (and not to the machine physically attached to the tap) you need something like rspan (http://en.wikipedia.org/wiki/Port_mirroring)
Luca On 15 Jul 2014, at 19:14, Chandru <[email protected]> wrote: > Thanks for the prompt response Luca. So is encapsulation necessary only if > the mirrored traffic has to traverse more than one LAN segment? > > regards, > Chandru > > > On 15 July 2014 18:08, Luca Deri <[email protected]> wrote: > Chandru > packets are not encapsulated at all as the mirror gives you a copy of the > original packet. > > I have not received any contact email. Please drop me a mail and I will > assist you > > Regards Luca > > On 15 Jul 2014, at 18:52, Chandru <[email protected]> > wrote: > > > Hi all, > > > > Quite a basic question, but couldn't easily find an answer while > > researching. When a port mirror or network tap is setup, in what format are > > the packets encapsulated? Is it using GRE as specified in RFC2784? > > > > I also have a question regarding buying an ntop based capture appliance? > > Who should I contact? I emailed the contact listed on the web page but > > didn't get a response. > > > > regards, > > Chandru > > > > _______________________________________________ > > Ntop-misc mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
