Why does a KVM guest not receive all network traffic sent to the bridge?

Solution Unverified - Updated -


  • Want to perform network traffic analysis (e.g. tcpdump or wireshark) from a KVM virtualisation guest.
  • Traffic delivered to a bridge.
  • KVM guest does not receive all traffic, only traffic addressed to it and broadcast traffic.
  • The bridge is acting as a switch not as a hub.


  • Red Hat Enterprise Linux 5
  • KVM virtualisation
  • Bridged networking. Bridge virbr0 receives the traffic that is to be analysed.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In