My goal is to use ipset
lists in iptables
to log outbound traffic to certain IP addresses. I intend to monitor an entire network passively.
I have port mirroring enabled and the port mirrored traffic is broadcasting to a server with two network adapters. Eth0 is dedicated to system management and Eth1 operates in promiscuous mode and is dedicated to capturing the traffic passed to it. Is it possible to use iptables
to log outgoing traffic on the network that is being monitored? Thank you.