Sending Packets to a Mediation Device on MX Series Routers

Dynamic flow capture enables you to capture passively monitored packet flows on the basis of dynamic filtering criteria, using Dynamic Tasking Control Protocol (DTCP) requests. The flow-tap application extends the use of DTCP to intercept IPv4 packets in an active flow monitoring station and send a copy of packets that match filter criteria to one or more content destinations. Flow-tap data can be used for lawful intercept purposes and provides flexible trend analysis for detection of new security threats. The flow-tap application is supported on MX Series routers.

Note:

. For information about DTCP, see Internet draft draft-cavuto-dtcp-01.txt at http://www.ietf.org/internet-drafts.

For detailed information about the flow-tap application, see the following sections:

Understanding Flow-Tap Architecture
Configuring a Flow-Tap Interface on MX, M and T Series Routers
Configuring Flow-Tap Security Properties on MX, M and T Series Routers
Flow-Tap Application Restrictions
Example: Flow-Tap Configuration on T and M Series Routers