Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Aug 2017 19:09:15 +0700
From:      Eugene Grosbein <eugen@grosbein.net>
To:        "C. L. Martinez" <carlopmart@gmail.com>, freebsd-net@freebsd.org
Subject:   Re: Por mirroring un ser bhyve
Message-ID:  <599D706B.8000001@grosbein.net>
In-Reply-To: <CAEjQA5LXqQvkLNiXTdc0hD_gk2dpAj1cC2m2n4JBHTGm-EKH_w@mail.gmail.com>
References:  <CAEjQA5LXqQvkLNiXTdc0hD_gk2dpAj1cC2m2n4JBHTGm-EKH_w@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 22.08.2017 21:04, C. L. Martinez wrote:
> Hi all,
> 
>  I would like to install some fbsd bhyve guests acting as an IDS. To
> accomplish this I need to configure a span port under bhyve host. But,
> how?. How do I need to configure a bridge in this fbsd host to copy every
> Ethernet frame received by the bridge and pass them to fbsd bhyve guests?

Yep, try this for host, assuming tap0 is connected to the guest IDS:

ifconfig bridge0 create 
ifconfig bridge0 inet x.x.x.x/x addm $realnic span tap0 up

And for a guest, use:

ifconfig $spanport monitor





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?599D706B.8000001>