Hi all,

I am trying to enable promiscuous mode on a kvm switch due to sniff all traffic using snort installed on a kvm guest.

I have found a partial solution configuring this bridge with "brctl setaging br0 0", but all vms sees all traffic.

I think the soultion is using ebtables but I didn't found any doc about how can I do under kvm (and upstream recommends disable this function).

Any ideas??

Thanks.