Hello, Using Tomato 1.21 on a WRT54G v2 I am looking for a way to set up a mirror port so I can tee all traffic to a specific host running ntop/snort+spade/arpwatch etc. As you can imagine, atm the only traffic he sees is broadcast and unicast to/from himself...which is lame for network security monitoring. I would do a hub but don't really want *another* device in the chain. The closest I've come is this post: http://www.linksysinfo.org/forums/showthread.php?t=40709 But the -j ROUTE --tee suggestion doesn't seem to work, and actually just causes iptables to print the commandline help which makes me think the ROUTE target is missing? Also, for the QoS options in the GUI, are they only for WAN traffic? They must be because classifying traffic from LAN_HOST_A -> LAN_HOST_B as "High" results in his traffic remaining "Unclassified" despite saving, refreshing, saving again etc. Can we not QoS LAN <-> LAN traffic? I have a million LAN services running and some I care more about than others, but right now they all seem to be equal. Any guidance is appreciated. Thanks!