Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does anyone know how to enable promiscuous mode on a libvirt vif?
I have a bridge with 3 vifs connected to it. I need one of these vifs to be able to sniff all the traffic flowing through the bridge.
The interface has the following iptable rules:
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-out vif32.2 --physdev-is-bridged ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif32.2 --physdev-is-bridged
How could I change this so the vif can get all packets regardless of the MAC address?

share|improve this question
up vote 0 down vote accepted

Not exactly what I was looking for but this worked for me:

brctl setageing bridgename 0
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.