port mirroring and dns traffic

[BartP]

Hi all,

I executed the following commands in my dd-wrt flashed router to set up port mirroring:

xxx@xxx:~# iptables -t mangle -A POSTROUTING -j ROUTE --tee --gw 192.168.1.3
xxx@xxx:~# iptables -t mangle -A PREROUTING -j ROUTE --tee --gw 192.168.1.3

As far as I've been able to ascertain, all ip-packets are mirrored except for dns stuff. Anyone know why?

Thanks,
Bart

 

[[OC]Pik4chu]

Hi all,

I executed the following commands in my dd-wrt flashed router to set up port mirroring:



As far as I've been able to ascertain, all ip-packets are mirrored except for dns stuff. Anyone know why?

Thanks,
Bart

What did you do to determine that dns was not passing?

And I doubt the order matters but in case it does I found the strings arranged this way in a guide online.

iptables -A PREROUTING -t mangle -j ROUTE --gw 192.168.1.3 --tee

iptables -A POSTROUTING -t mangle -j ROUTE --gw 192.168.1.3 --tee