Re: Duplicate incoming packets to multiple destinations using pf

2008-11-06 Thread Simen Stavdal
Ok, Here are the first results I have set up loopback addresses with the same ip address on two receivers (for testing). (A.A.A.10) Each receiver has unique external ip adresses in the same subnet as the $nms_if First, I created this rule : pass in on $int_if dup-to ( $nms_if $nms_broadcastad

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Simen Stavdal
Hello again, Ok, I think we are getting closer to a resolution. I like the loopback solution (never thought of that), it should work for udp at least since it is connection-less, and it would work for my scenario and netflow alike. Then you could add multiple loopbacks to "subscribe" to different

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Damian Gerow
Simen Stavdal wrote: : Worth submitting a feature request? : --- I looks like this would be the best solution --- Sounds like you have your desired solution. So long as the OBSD developers accept your request as valid. : --- The subject of my posting is "Duplicating incoming packe

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Russell Howe
Simen Stavdal wrote, sometime around 05/11/08 15:25: Hi Russell, Thanks for your answer. Sending traps to multicast addresses seems like a good idea, except it would be up to the receiver to decide whether to use the trap or not (taking away the possibility to filter which hosts gets copied the

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Simen Stavdal
Hi Russell, Thanks for your answer. Sending traps to multicast addresses seems like a good idea, except it would be up to the receiver to decide whether to use the trap or not (taking away the possibility to filter which hosts gets copied the traps (multicast traps to predefined destinations)). I

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Simen Stavdal
Hi Damian, Nothing like a fiery discussion :) On Wed Nov 5 15:39 , Damian Gerow sent: Simen Stavdal wrote: : I am not trying to escape the fact that one needs systems in place : to manage large installations, I am merely looking for what *I* : think would be a better way to deploy resour

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Damian Gerow
Simen Stavdal wrote: : I am not trying to escape the fact that one needs systems in place : to manage large installations, I am merely looking for what *I* : think would be a better way to deploy resources. I'm just going to drop this part of the thread. : As a service provide

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Russell Howe
Simen Stavdal wrote, sometime around 05/11/08 14:14: Hi Damian/misc, I appreciate your input -I really do. Please see my comments below. I am not trying to escape the fact that one needs systems in place to manage large installations, I am merely looking for what *I* think would be a bett

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Simen Stavdal
Hi Damian/misc, I appreciate your input -I really do. Please see my comments below. Cheers, Simon. On Wed Nov 5 14:46 , Damian Gerow sent: Simen Stavdal wrote: : 1) Less configuration on the devices (and also less load, though not a : big problem anymore). This is not really a problem f

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Damian Gerow
Simen Stavdal wrote: :1) Less configuration on the devices (and also less load, though not a :big problem anymore). This is not really a problem for small :installations, but once you have 500+ devices to configure, it is easy :to do the maths. You should always have systems in pla

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-05 Thread Simen Stavdal
Hello Damian/Claer/misc, Thanks for your feedback, Just a bit more background... Here is some of my reasoning for wanting to do trap handling and duplications There are several advantages to having the devices send only one trap to a central system. 1) Less configuration on the devices (and a

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Damian Gerow
Claer wrote: : > Thanks for the answer, I guess dup-to isn4t the right tool then... : > Has anyone tried to achieve what I am trying to do though? : > I am obviously open to other ideas. : Maybe I'll give you a wrong path but, did you looked at "proxying" the : trap with net-snmp ? : Direct the or

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Claer
On Tue, Nov 04 2008 at 02:19, Simen Stavdal wrote: > Hi Giancarlo/misc, Hello, > Thanks for the answer, I guess dup-to isn4t the right tool then... > Has anyone tried to achieve what I am trying to do though? > I am obviously open to other ideas. Maybe I'll give you a wrong path but, did you looke

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Giancarlo Razzolini
Simen Stavdal escreveu: Hi Giancarlo/misc, Thanks for the answer, I guess dup-to isn4t the right tool then... Has anyone tried to achieve what I am trying to do though? I am obviously open to other ideas. The main objective though, is to preserve the source address, while replacing the destina

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Simen Stavdal
Hi Giancarlo/misc, Thanks for the answer, I guess dup-to isn4t the right tool then... Has anyone tried to achieve what I am trying to do though? I am obviously open to other ideas. The main objective though, is to preserve the source address, while replacing the destination address to multiple h

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Giancarlo Razzolini
Simen Stavdal escreveu: Hello, I have the following scenario. A router (let's call it router A) is sending snmp traps to an nms (Network Monitoring System). Between the router A and the nms (let's call it nms-a) is a Dell PowerEdge 860 running OpenBSD 4.1 i386 (bsd.mp) and pf. On the same segme

Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Simen Stavdal
Hello, I have the following scenario. A router (let's call it router A) is sending snmp traps to an nms (Network Monitoring System). Between the router A and the nms (let's call it nms-a) is a Dell PowerEdge 860 running OpenBSD 4.1 i386 (bsd.mp) and pf. On the same segment as nms-a, is nms-b, nms