Untagging vlan with ebtables or something else on linux

Question

linux

Actually, is it real?

The task is this - a traffic mirror goes through the server, which was not originally intended for this server, among which there are a huge number of vlan. It doesn’t matter which ones specifically, because the task is simply to analyze this traffic using iptables. I just don't want to do bicycle building and start writing an ebtables module for this.

Answer 1

If I understand you correctly, then it is necessary to process wealans inside the bridge with a firewall, the sysctl option is responsible for this:
net.bridge.bridge-nf-filter-vlan-tagged=1

Answer 2

What should be the analysis?
iptables is still not for analysis, but for filtering.
Formally, he has nothing to do here, because. mirrored traffic.