How to replicate network traffic
You can replicate network traffic by connecting network ports to tool ports with load balancing disabled in the connecting rule. Doing so is useful when several different analysis tools need access to the same traffic.
Figure 4: Example of traffic replication
Replication example Web-quality PNGReplication example Web-quality PNG
Replicating network traffic is straightforward using the Matrix: tool ports always replicate the traffic of network ports they are connected to (unless load balancing is enabled). The traffic that replicates is the post-processed traffic, such as after filtering, trimming, deduplication, and more, has occurred. Network traffic replication can only occur if load balancing is disabled in the connecting rule.
Note: To edit the active layout (the layout currently in use), perform edits directly from the Ports page. Edits to the active layout take effect in real time.
To replicate network traffic:
1. Starting in the dashboard, click Ports.
The layout designer appears, where connections between network and tool ports can be created.
2. In the Layout list, select a layout.
3. Click the Actions list.
The Actions list is located near the top-right corner of the layout designer.
4. Click Edit.
5. Use a drag-and-drop operation to connect a network port to a tool port.
Successful connections are represented by lines between the ports and the appearance of an empty rule. The empty rule is a placeholder for introducing options such as filtering.
6. Use a drag-and-drop operation to connect another tool port to the same rule.
This step is repeatable, so connecting additional tool ports to the rule is possible. Each additional tool port being connected to the rule creates another replicated traffic stream.
Identical post-processed traffic is now being forwarded to each connected tool port. Replication such as this provides different tools with the same traffic.