How to forward invalid packets to LAN IP / NAT rule on Edgerouter ER3?

[SumGuy]

I'm asking this here because I don't think the UI forums get a lot of Edgerouter interest or questions.

I want to capture some packets from a specific external (internet/WAN) IP that is hitting my router maybe a few hundred times a day with invalid packets (dropped because of invalid state / unsolicited I guess). I've managed to create a WAN_LOCAL rule that will accept the packets in the FIREWALL setup but I'm not able to create a NAT rule that will kick-in. I want to forward these packets to a particular LAN IP where I have a Windoze machine running wireshark waiting to capture the packets. The destination ports are variable and could be anything so I'm not specifying anything in terms of ports.

Any ideas ?

 

[ColinTaylor]

I don't know anything about Edgerouters but my first instinct would be to try and capture the packets on the router rather than trying to redirect them to a LAN device. You could then either analyse them on the router or write the data to a pcap file that could then be opened by Wireshark.

https://help.ui.com/hc/en-us/articles/204962304-EdgeRouter-Capturing-Packets