Hi All,
Apologies if this has been covered elsewhere, I have looked for an hour or so but nearly all the relevant articles seem to relate to VSphere / Vcentre...
I've built a Bro VM on Ubuntu and have it up and running in Bridged mode, it reports suspect traffic in and out of the machine, as well as recording any broadcast traffic that comes over the bridge. Very happy with that, but what I really need to be able to do is set up a network tap / port mirroring switch on my home network at my router to the Internet, and have the traffic from that sent via SPAN to the VMware Bro host. The Macbook I am running connects to my network via wifi over a Time Capsule, which handles all the DHCP for all hosts. I'm getting pretty certain that SPAN will not work over wifi, and that it needs to be an ethernet connection into the macbook at the very least (this in itself is a concern because it's a new MBP without an ethernet port (uses a Thunderbolt adapter). I'll just build this down to a few individual questions and any answers to them would be mightily appreciated!
1. Is it possible to SPAN a physical switch port over wifi?
2. Has anyone out there Spanned / port mirrored into a wired, ethernet VMware Fusion Pro hosted VM?
3. Has anyone out there Spanned / port mirrored into a wired, ethernet VMware Fusion Pro hosted VM, over a Thunderbolt adapter?
4. Finally any good links to articles / KB articles on the web which address IDS on VMWare Fusion Pro?
5. Any advice on an overlap of the feature set between VMware Fusion Pro 7 and VSphere / VCenter?
6. Has anyone out there got advice about running a Cisco Nexus 1000v within VMware fusion Pro, or perhaps a Linux distort which is similar in feature set to a 1000v?
Thanks in advance for any answers at all on any of this!