An operation method of a first communication node among a plurality of communication nodes included in an Ethernet-based vehicle network includes: receiving a first message indicating an operation of a first function of a vehicle from a second communication node among the plurality of communication nodes; determining a third communication node performing a second function corresponding to the first function among the plurality of communication nodes; determining at least one communication node providing data related to the second function among the plurality of communication nodes; and configuring port mirroring for the first function such that a second message received from the at least one communication node is mirrored to the third communication node.