[SOLVED] Mirror NIC passthrough to VM

[Error404eu]

Hello everyone

I apologize if my question seems naive, but I am quite new to Proxmox.
I am trying to deploy ntopng on my Promxox VE environment. I mirrored the traffic from my switch core and I created the following /etc/network/interfaces configuration:

auto lo
iface lo inet loopback
iface eno2 inet manual
auto enx0c0e768ff060
iface enx0c0e768ff060 inet manual

# MGMT NIC
auto vmbr0
iface vmbr0 inet static
        address 10.10.49.129/25
        gateway 10.10.49.254
        bridge-ports eno2
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

# MGMT VLAN
auto vlan1483
iface vlan1483 inet static
       vlan-raw-device vmbr0

# Mirror Bridge (vmbr1) - VLAN mirroring
auto vmbr1
iface vmbr1 inet manual
       bridge_ports enx0c0e768ff060
       bridge_stp off
       bridge_fd 0

From the Proxmox shell i am able to correctly view the mirrored traffic from all my multiple VLAN with tcpdump -i vmbr1, but once i assign the vmbr1 interface to my ntop vm, the ntop machine only display netbios traffic.

The /etc/pve/qemu-server/100.conf configuration of my ntop ubuntu 22.04 VM is the following:

boot: order=virtio0;ide2
cores: 2
ide2: none,media=cdrom
memory: 2048
meta: creation-qemu=7.1.0,ctime=1677772154
name: VSRVNTOP
net0: virtio=3A:84:3A:28:67:1D,bridge=vmbr0,tag=1483
net1: vmxnet3=BC:24:11:24:B2:12,bridge=vmbr1
numa: 0
onboot: 1
ostype: l26
scsihw: virtio-scsi-single
smbios1: uuid=a8288075-02a2-47d2-8c2f-ffd35bc60bd6
sockets: 1
virtio0: local-lvm:vm-100-disk-0,iothread=1,size=50G
vmgenid: 08145126-19bf-4557-8226-d837822eb833

Any help is greatly appreciated!

 

[spirit]

try to add:

"bridge_ageing 0" option to vmbr1, it'll flood traffic to all ports.

(by default, it's working like a real switch, so once the mac is learned, it don't forward traffic anymore if the mac it not the correct distination).you can disable bridge_



Another way could be to really passthrough the nic, with real pci-passthrough. (without any bridge and virtio-nic virtualisation)

 

[Error404eu]

Thank you very much, bridge_ageing 0 worked flawlessly!