Build VTAP packet mirroring configurations with capture filters for network traffic analysis.
Last verified: May 2026
Build VTAP packet mirroring configurations with capture filters for network traffic analysis and IDS.
Required Fields
compartmentIdvcnIddisplayNamesourceIdsourceTypetargetIdtargetTypeOutput will appear here...Build VTAP packet mirroring configurations with capture filters for network traffic analysis. This tool helps OCI engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.
Your team's production app is intermittently dropping connections — issue not reproducible in staging. The builder generates a temporary VTAP: source = the affected production VM, target = a Wireshark analysis VM in a separate subnet, capture filter narrowing to TCP traffic on the affected port. Within an hour of investigation, the team identifies the issue: a downstream service is sending TCP RST packets due to misconfigured idle timeout. Without VTAP, this would have required deploying tcpdump on the production VM (security risk + performance impact). With VTAP, traffic mirroring is invisible to the production workload.
VTAP (Virtual Test Access Point) mirrors network traffic to a target without affecting the original flow — invaluable for security forensics, IDS/IPS deployment, and troubleshooting hard-to-reproduce network issues. The original traffic continues normally; the mirror is a copy for analysis.
VTAP capture filters dramatically reduce mirror volume. Without filters, you'd capture ALL traffic from the source — overwhelming both bandwidth and analysis tools. Filter by protocol, source/destination CIDR, or port range to capture only traffic relevant to your investigation.
VTAP targets can be Network Load Balancer or specific instances. For long-running monitoring (IDS/IPS deployment), target an NLB pool of analysis VMs for redundancy and load distribution. For short-term troubleshooting, target a single instance to keep cost minimal.
The builder constructs OCI VTAP configurations: VTAP resource (compartment, VCN, source resource OCID — the resource whose traffic to mirror, target type: NetworkLoadBalancer/Instance, target OCID, capture filter selecting which traffic to mirror by protocol/source/dest/ports, traffic mode: DEFAULT or PRIORITY, max packet size). Output is generated as oci network vtap commands and Terraform oci_core_vtap + oci_core_capture_filter resources.
Was this tool helpful?
Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.