Suricata->Opensense->Proxmox->WAN Cant capture anythyng

,
1

I think found issue on this forum

but my config looking another face:
/etc/pve/qemu-server/122.conf

boot: order=scsi0;net0
cores: 2
cpu: x86-64-v2-AES
memory: 6144
meta: creation-qemu=9.0.2,ctime=1730634148
name: OpnSense
net0: virtio=XX:XX:XX:XX:XX:X1,bridge=vmbr0
net1: virtio=XX:XX:XX:XX:XX:X2,bridge=vmbr1
numa: 0
onboot: 1
ostype: l26
scsi0: ...........
scsihw: virtio-scsi-single
smbios1: uuid=..........
sockets: 2
startup: order=1
tags: ...........
usb0: host=3-14
vmgenid: ...........

in issue topic config like this:

    <interface type='bridge'>
      <mac address='..:..:..:..:..:..'/>
      <source bridge='ovs-guests'/>
      <virtualport type='openvswitch'>
      </virtualport>
      <model type='virtio'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>
    </interface>

Issue №2
Change driver in Proxmox Vitrio to 1000e = Opensense Cant connetc ppoe wan provider

2

Hi,

I am using a QEMU-KVM hypervisor as well, not proxmox but it is similar.
I would recommend to use the virtio drivers instead of 1000e duo performance reasons.

For the traffic not being seen you need to make sure promiscuous mode is enabled on the interface you want to monitor.

Hope this helps you in the right direction.