Monitoring ports not working

crashdown

New Member
Jul 13, 2021
1
0
1
53
Hello everyone. I'm hoping someone can help solve a unique problem I am having with span/tap/monitor ports
Promox 6-4-4
I have installed openvswitch

I am running AlienVault OSSIM and Xubuntu as guest - both have same problem.

I have 3 active physical ethernet ports eno1,2,3

The problem is that the virtual interface attached to eno2 works fine, but the virtual interface attached to eno3 is only seeing broadcast traffic.

Running tcpdump on eno3 reveals the interesting traffic that I am looking for. However, running tcpdump on the attached virtual interface vmbr2 only reveals broadcast traffic.

Again, tcpdump on eno2/vmbr1 works fine.

All configurations are the same between the two interfaces. The vmbrX interfaces are both configured as OVSBridges.

Any advice?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!