
10 Jan
2012
10 Jan
'12
7 p.m.
I am trying to get the equivalent of promisc mode to pass all received traffic to a kvm guest that is running snort. So I have a cisco switch with span port plugged into eh2 on my kvm host which is centos. I want the kvm host to forward all promisc traffic from the span port to the guest running snort of tcpdump. What would be the best way to do this?