A network device may receive a request, to install a filter, that includes information identifying a first source address, a first destination address, a content destination device, and a tapping level indicator. The network device may create an additional filter, based on the tapping level indicator, by setting the first destination address as a second source address, determining a third destination address that is a destination for the second source address, and setting the third destination address as a third source address. The network device may add the filter and the additional filter to a list of filters, and may receive, from source devices, packets destined for destination devices. The network device may generate a copy of a packet, and may determine that the copy of the packet matches the filter or the additional filter. The network device may forward the copy of the packet to the content destination device.