New Member
Jun 2, 2022
For a project we have a UniFi 24 Ports switch (2nd gen), we also have a Proxmox cluster. We configured the UniFi switch to mirror the uplink (trunk) port to the UniFi UDM. When physically connecting a laptop and Wireshark to this mirror port, we can see all traffic (from ALL vlan's).

However, we want to bind this port to a VM inside Proxmox and use Wireshark in that VM, but in our current configuration, it looks like we are only seeing Broadcast traffic. How can we solve this problem?

Our configuration looks as follows:
Please note: the blue selected (virtual) NIC's are the relevant NIC's in this image, the other NIC's work as needed and DON'T need any change!

Is there someone who has had the same issue or perhaps someone who knows the awnser to this question?

Thanks in advance!

P.S. if more information is required, please let me now!
I'm not sure this can work this way.

With this setup the VM listening has a virtual port behind a Linux bridge which acts more or less like a switch. This would explain why you are only seeing broadcast traffic :).

I think what should work is handing over the network card PCIe to the VM, the other option is Open VSwitch (OVS) where you can set promiscuous mode but I never played around with that (see https://pve.proxmox.com/wiki/Open_vSwitch )
Last edited:


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!