Was a solution for this ever reached? I am needing a snort type solution myself as my new switches don't support mirroring. Could the packet delivery of the bridge be modified to deliver to all interfaces? Any ideas where I should start breaking things in the source? Thanks much Kevin Karsh _______________________________________________ Bridge mailing list Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/bridge