I am running a Red Hat 9 guest on a Windows XP Pro host. I have Snort set up on the guest, configured to look at all packets passing through the hub that the host is connected to. The problem is, I only see packets addressed directly to/from the host machine.
The ethernet interface on the linux guest is set to promiscuous mode, and the hub is a non-switching model, so I think the problem lies somewhere in the virtual network configuration on the host.
Is there a way to configure the host interface to be in promiscuous mode?
Thanks,
Brian McNeilly