<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Just trying to get Clarity on this issue.</p>
<p><a class="moz-txt-link-freetext" href="https://docs.mirantis.com/mcp/q4-18/mcp-security-best-practices/use-cases/idps-vnf/ips-mode/afpacket.html">https://docs.mirantis.com/mcp/q4-18/mcp-security-best-practices/use-cases/idps-vnf/ips-mode/afpacket.html</a></p>
<p>This is in the read use case document:</p>
<p style="box-sizing: border-box; margin: 0px 0px 1.6rem;
line-height: 1.43em; caret-color: rgb(51, 51, 51); color: rgb(51,
51, 51); font-family: "Open Sans", arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-caps: normal;
font-weight: normal; letter-spacing: normal; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;
text-decoration: none;"><strong style="box-sizing: border-box;
font-weight: 700;">To enable IPS mode using the ``AF_PACKET``
Linux bridge:</strong></p>
<div class="moz-signature">Does this mean that I can use the br0
interface?</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature">Or do I need to specify an instance for
each of the interfaces in the bridge as Interface: and copy-iface:
configuration items?</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature">brctl show<br>
bridge name bridge id STP enabled
interfaces<br>
br0 8000.6805ca842147 no
enp1s0<br>
enp4s0<br>
<br>
</div>
<div class="moz-signature">I'm not sure if I can use the bridge to
intercept bidirectional traffic, or if I need a single listener
for each inbound and outbound traffic.</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature">Thank you.<br>
</div>
<div class="moz-signature">-- <br>
-- <br>
--<br>
<br>
Albert E. Whale Email: <a class="moz-txt-link-abbreviated"
href="mailto:Albert.Whale@IT-Security-inc.com">Albert.Whale@IT-Security-inc.com</a><br>
Cell: 412-889-6870<br>
<br>
</div>
</body>
</html>