Why does a KVM guest not receive all network traffic sent to the bridge?
Issue
- Want to perform network traffic analysis (e.g. tcpdump or wireshark) from a KVM virtualisation guest.
- Traffic delivered to a bridge.
- KVM guest does not receive all traffic, only traffic addressed to it and broadcast traffic.
- The bridge is acting as a switch not as a hub.
Environment
- Red Hat Enterprise Linux 5
- KVM virtualisation
- Bridged networking. Bridge
virbr0receives the traffic that is to be analysed.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.