On Wed, 2014-01-08 at 11:23 -0800, John R Pierce wrote: > that doesn't make any sense. > > a SYN packet comes in, is forwarded to serverA and serverB > > both servers reply with an 'ack'.... man, is the client tcp stack going > to be confused! He didn't say anything about both servers replying, only that he wanted to mirror all port 80 traffic. Maybe he's trying to develop a protocol specific IDS, or maybe he wants to build some sort of OOB transaction log of his HTTP traffic.