I am trying to get the equivalent of promisc mode to pass all received traffic to a kvm guest that is running snort. So I have a cisco switch with span port plugged into eh2 on my kvm host which is centos. I want the kvm host to forward all promisc traffic from the span port to the guest running snort of tcpdump. What would be the best way to do this?
