erspan(4): ERSPAN Type II collection
by from OpenBSD Journal on (#6X7D2)
Our favorite operating system is in the process of aquiring Encapsulated Remote Switch Port Analyzer (ERSPAN) support, in the form of a new virtual network interface, dubbed erspan(4).
An early version of the code, but possibly close to being ready for further development in-tree waspresentedby David Gwynne (dlg@) in amessage to tech@:
List: openbsd-techSubject: erspan(4): ERSPAN Type II collectionFrom: David Gwynne <david () gwynne ! id ! au>Date: 2025-05-12 1:27:59we were exploring how to better let us see what's happening on accessnetworks or specific ports on a switch at work. our switches arepretty much all cisco, which has ERSPAN.ERSPAN in it's various forms ships Ethernet packets over GRE forcollection and analysis on another system. There's 3 types of ERSPANencapsulation, but Type II seems broadly implemented.