I've been tasked with looking into a method of capturing any traffic traversing a particular router interface to have it forwarded via syslog to secureworks for monitoring. Does anyone have any ideas on how to set this up? I was thinking of port mirroring on the switch but not sure where to go from there.
Thanks,
Larry
