Hello everyone,
I'm trying to setup OpenVPN as a sort of a network probe that would capture all network traffic on the bridged interface, and send that traffic to the client(s). the end result should be as if the client opened a sniffer on the remote interface (currently, in my ethernet-bridge configuration, sniffing on the client's TAP device only shows multi/broadcast traffic, and unicast traffic meant to the client itself).
is this sort of forwarding even possible with OpenVPN (or via etables/iptables), or should I look for another solution, like writing a PCAP wrapper, and a small program that replays the packets on a TAP device (I'm insisting on using an interface since this entire system is supposed to integrate with a network monitoring system that listens on network interfaces)?
and to make it all clearer:
-------------------------------------------------- --------------------------------------------
[Site LAN]~~~~~~~~~~~~~~~~~~|eth1/br0/tap0] Network probe (VPN server) [eth0| ~~~~~<internet>~~~~~ |eth0/tap0] Monitoring system (VPN client) |
-------------------------------------------------- --------------------------------------------
here, the monitoring system should be able to use, let's say wireshark, on tap0, and capture all the traffic (as in promiscuous mode) from the server's eth1.
thanks in advance!
