Datacenter: firewall -> disabled.Did you check if the firewall on your PVE are runnign?
I heard there is a hidden tap device. You need to mirror from there. See this one, the author used ovs, but I guess the same applies to linux bridge.View attachment 38492
network config:
ens15f2(nic) -> vmbr4(bridge) -> eth0(guest os).
network traffic from ens15f2 can't mirror to eth0.
using tcpdump -i eth0 got nothing, but tcpdump -i vmbr4 can got packets.
so how to mirror network traffic to eth0 like a switch?