Isolated bridge blocking synflood for lab

elminster13

Member
Oct 18, 2022
7
0
6
Hi - I am hoping to better understand some issues I am having with running an experiment for a cyber security lab. I have two VMs (ubuntu and kali) which I have connected on a virtual bridge (vmbr1). I have isolated the bridge and set the IPs for both VMs to .1 and .2

The test I am running is to capture synflood traffic using metasploit from the kali box to the ubuntu box in wireshark. If I use hping3 it works fine but metasploit is having issues and the packets never exit the VM. I have recreated the same lab in virtual box on a windows laptop and it works fine.

Some of the things I have done to troubleshoot is turn off the firewalls on both VMs and in the proxmox bridge. I get the feeling this is specific to proxmox and its handling of arp requests but I just cant get to the bottom of it.

my interface is setup like this:

auto vmbr1
iface vmbr1 inet static
address 192.168.1.0/24
bridge_disable_mac_learning yes
bridge-ports none
bridge-stp off
bridge-fd 0
bridge-aging 0

Seeking some ideas from those more knowledgable than me