Snort network interface issue

Hello,

I am currently facing an issue with the Snort sensor not being able to capture all network traffic.
Here's the setup:

I have a dedicated server connected to several cloud servers via a vSwitch.
The vSwitch is configured to allow the dedicated server to reach the cloud servers, and I have set the vSwitch network interface to promiscuous mode.

However, the Snort sensor is unable to detect all traffic across the network. For example, when Server A pings Server B, Snort doesn't capture this traffic. On the other hand, when a separate Server X pings the Snort server, the traffic is detected.

Could you please provide any recommendations or insights into resolving this issue?

Thank you for your assistance.
Best regards,

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette