So i have snort on a vm in proxmox, it is correctly set up and in the vm's terminal i enabled promiscuous mode. But snort only is capturing and alerting with network traffic that is communicating with this machine? I think through proxmox i need to make changes to the network interface and force all traffic to go through the VM then bridge the VM to others or use port mirror. Anyone know if this is the fix to the problem or know exactly how to do this?
Thanks!
Thanks!