Hi all, I am trying to enable promiscuous mode on a kvm switch due to sniff all traffic using snort installed on a kvm guest. I have found a partial solution configuring this bridge with "brctl setaging br0 0", but all vms sees all traffic. I think the soultion is using ebtables but I didn't found any doc about how can I do under kvm (and upstream recommends disable this function). Any ideas?? Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com