Option: Using the Flow-Tap Application to Send Packets to a Mediation Device
Dynamic flow capture enables you to capture passively monitored packet flows on the basis of dynamic filtering criteria, using Dynamic Tasking Control Protocol (DTCP) requests. The flow-tap application extends the use of DTCP to intercept IPv4 packets in an active flow monitoring station and send a copy of packets that match filter criteria to one or more content destinations. Flow-tap data can be used for lawful intercept purposes and provides flexible trend analysis for detection of new security threats. The flow-tap application is supported on M Series and T Series routers, except M160 routers and TX Matrix platforms.
 | Note: For information about dynamic flow capture, see Using a Dynamic Flow Capture Interface to Monitor Traffic On Demand. For information about DTCP, see Internet draft draft-cavuto-dtcp-01.txt at http://www.ietf.org/internet-drafts. |
For detailed information about the flow-tap application, see the following sections:
- Flow-Tap Architecture
- Configuring the Flow-Tap Interface
- Configuring Flow-Tap Security Properties
- Flow-Tap Application Restrictions
- Example: Flow-Tap Configuration
