It might not be the best way, but if you set the ageing time of the bridge to 0, the bridge will forward the desired traffic.<div><br></div><div>David</div><div><br></div><div><br><br><div class="gmail_quote">On Tue, Jan 10, 2012 at 7:00 PM,  <span dir="ltr">&lt;<a href="mailto:nemus@grayhatlabs.com">nemus@grayhatlabs.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I am trying to get the equivalent of promisc mode to pass all received<br>
traffic to a kvm guest that is running snort.<br>
<br>
So I have a cisco switch with span port plugged into eh2 on my kvm host<br>
which is centos.<br>
<br>
I want the kvm host to forward all promisc traffic from the span port to<br>
the guest running snort of tcpdump.<br>
<br>
What would be the best way to do this?<br>
<br>
<br>
_______________________________________________<br>
libvirt-users mailing list<br>
<a href="mailto:libvirt-users@redhat.com">libvirt-users@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/libvirt-users" target="_blank">https://www.redhat.com/mailman/listinfo/libvirt-users</a><br>
</blockquote></div><br></div>