Creating a Virtual Port / Network Bridge of a remote nic?

[Austin Reed]

I am trying to use Rita to do beaconing analysis, unfortunately, it is only available for Ubuntu and CentOS. I have a network tap setup that is connected to a monitoring port on a linux machine and I would like to be able to use that port on my laptop which I'll image with Bacbox (ubuntu). Since Rita looks for a physical port on install so I can't just forward pcap files is there a way to mirror/bridge the port on my server to the laptop over ethernet? I thought about just getting an ethernet splitter to connect to the tap but that won't be capable of GB speeds and the server is at full load so I can't utilize its os. I also looked into using a VM and that won't work either.

 

[Trip]

How about, instead of a port splitter, using a port mirror on a managed enterprise switch, which will run at gigabit speed? It doesn't have to be spendy, like a used HPE 2520 or 2530 off FleaBay, or similar.