Hello there, is there a way from iptables to forward all traffic to my IDS Suricata and also keep the regular flow, I have two interfaces and I did find how to do it with one interface.. example:
-t mangle -A PREROUTING -i eth0 -j TEE --gateway <your IDS IP>
but can I get all data from eth0 and forward it another server with my IDS using the interface eth1 while keeping the regular eth0 flow?
The reason for this is to have all IDS data in a different interface.
Thanks in Advance.