It might not be the best way, but if you set the ageing time of the bridge to 0, the bridge will forward the desired traffic.

David



On Tue, Jan 10, 2012 at 7:00 PM, <nemus@grayhatlabs.com> wrote:
I am trying to get the equivalent of promisc mode to pass all received
traffic to a kvm guest that is running snort.

So I have a cisco switch with span port plugged into eh2 on my kvm host
which is centos.

I want the kvm host to forward all promisc traffic from the span port to
the guest running snort of tcpdump.

What would be the best way to do this?


_______________________________________________
libvirt-users mailing list
libvirt-users@redhat.com
https://www.redhat.com/mailman/listinfo/libvirt-users