I have an IDS system I've containerized. eth0 is on vmbr0 while eth3 is an interface running from a SPAN session of a Cisco switch. I've tried creating a new bridge (vmbr100) and added eth3 to it. This allows the container to see UDP traffic from the SPAN session but none of the TCP traffic seems to be coming through the bridge. If I tcpdump eth3 on the hypervisor I can definitely see TCP traffic from the SPAN session. Nothing on the container though. How can I view my all my SPAN session traffic on eth3 in the container?