> If there's a better way to configure a VM > for traffic sniffing, I'd be interested in hearing... as would i. :-/ my understanding (?) is that passthru to PV domu need to be eliminated to avoid the aforementioned security hole. that leaves passthru to HVM -- which requires AMD-V (or intel VT-d ...) extension support. and, i _think_ that means xen ver >= 3.2.0 is required. fedora9's not an option. fedora8's "not going to support it" policy, though understandable on the march to paravirt_ops, leaves little to lean on in terms of community support ... best option i'm finding so far is Centos51, with a rpmrebuild of xen 320 from src rpm, http://bits.xensource.com/oss-xen/release/3.2.0/centos-5.1/xen-3.2.0-0xs.centos5.src.rpm (if there's a 3.2.1 src rpm available, i haven't found it yet ...) in the process of trying it myself ... -- Fedora-xen mailing list Fedora-xen@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-xen