It might not be the best way, but if you set the ageing time of the bridge to 0, the bridge will forward the desired traffic. David On Tue, Jan 10, 2012 at 7:00 PM, <nemus@grayhatlabs.com> wrote:

I am trying to get the equivalent of promisc mode to pass all received traffic to a kvm guest that is running snort.

So I have a cisco switch with span port plugged into eh2 on my kvm host which is centos.

I want the kvm host to forward all promisc traffic from the span port to the guest running snort of tcpdump.

What would be the best way to do this?

_______________________________________________ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users