packet capture for AWS and on-prem firewall

Question

How do I setup a packet capture in AWS to capture packets from my on-prem firewall?  I want to see if traffic from a specific public IP address is making it from my firewall to my AWS IP address.  I have tried following the instructions for creating traffic mirroring targets, filters, and sessions.
Please let me know what other information is needed.
Thanks,

Answer

If you don't really need the data packets, you should take a look at [VPC Flow Logs](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). You can turn it on for an individual Instance (ENI) and publish the data to CloudWatch Logs.

Answer

I would use the follwing feature : https://aws.amazon.com/blogs/aws/new-vpc-traffic-mirroring/ to get your the data you need. On the onprem firewall you can initiate a packet pacture for the outbound interface using the provided tools of yoru oprem firewall.

packet capture for AWS and on-prem firewall

Contenuto pertinente