bearda Posted August 20, 2014 Share Posted August 20, 2014 I had a very specific use case in mind when I bought a Wifi Pineapple, but I'm having a hard time figuring out how to actually do what I want. I have a passive network monitoring appliance I want to receive traffic routed between two different WLANs. The idea was to use a separate USB-Ethernet adapter running out of the Pineapple and to mirror the wireless network traffic to it to keep the monitoring interface independent of the admin interface for the pineapple (I don't want DHCP or other incidental packets from the admin interface showing up in the traffic if I can help it). The end goal is to have a test and demo system where I can connect the pineapple to a public wireless network and connect an iPad or other mobile device that gets an internet connection routed through the pineapple to the other wireless network and have the appliance be able to see and inspect the traffic. Where I'm getting hung up is the monitoring port. I've been playing around with iptables rules based on the info here, but got stuck: http://blog.goddchen.de/2009/03/port-mirroring-span-port-monitor-port-with-iptables/ The destination ip address thing is the problem, since my monitoring device is entirely passive. I really want to force the traffic out one specific interface and since the device on the other end is promiscuous it'll take care of the rest. Can I get around this by making up a dummy ip address and adding a static route forcing it out my USB Ethernet interface? Is my entire plan flawed, or is there a better way of doing this entirely. Quote Link to comment Share on other sites More sharing options...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.