Send mirrored traffic into guest vm

geminux

New Member
Oct 16, 2018
2
0
1
46
Hi everyone,

I try to send mirrored traffic from another physical system to a guest vm.
The whole stack to achieve this is dedicated (switch port, physical nic, vmbr, guest nic).

I can see the mirrored traffic with tcpdump in the physical nic and the bridge.
But nothing from the tap interface or the guest nic.

notes:
  • I tried with and without promiscuous mode on each nic/bridge/tap.
  • I know I could achieve this with SR-IOV but I'd like to avoid modifying the whole setup for now (And it will be great to make it work on non-SR-IOV capable hardware)
EDIT : pve-manager/5.1-41/0b958203 (running kernel: 4.13.13-2-pve)

Here is a small diagram
proxm.png

Any thoughts/help about this ?
Thanks
 
Last edited:

geminux

New Member
Oct 16, 2018
2
0
1
46
OK guys it works :)

If anyone need the same functionnality, you just need to make the bridge act as a hub.
Code:
brctl setageing vmbr99 0
If you want to make it persistent, put this in /etc/network/interfaces
Code:
auto vmbrXX
iface vmbrXX inet manual
        bridge_ports nic0
        bridge_stp off
        bridge_fd 0
        bridge_ageing 0
I strongly recommand to do it ONLY on a dedicated vmbr/nic with ONLY few tap interfaces attached to avoid unnecessary congestion
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE and Proxmox Mail Gateway. We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!