| 摘要 |
A method and apparatus (100) for mirroring traffic from a first network device (106) to a second network device (110) are disclosed. The method includes the selecting of one or more qualified packets from an ingress stream using mirror classification criteria; duplicating the one or more qualified packets; appending a mirrored flow encapsulation header with the destination addressing information of the second network device (110) to the duplicate packets; transmitting the duplicate packets from the first network device (106) to the second network device (110); and removing the mirrored flow encapsulation header at the target network device (110) to regenerate the qualified packets originally received at the first network device (106). The qualified packets may then be forwarded to an egress port of the second network device (110) and analyzed by a traffic analysis tool, for example. With the invention, the traffic received at the first network device (106) may be analyzed remotely. <IMAGE> |
