Hi,
I'm trying to setup a new guest on Vmware Workstation (6.5) to run snort. following steps in this doc:
http://www.snort.org/assets/159/Snort_2.9.1_CentOS_5.pdf
The guest is running Centos 5.6, 32bit. The host is Windows 7 Premium (32bit), and I've been able to setup snort, etc., but after I did that, it looks like it wasn't seeing any traffic on the (bridged) network that was external to the guest (via eth1).
So, I tried running tcpdump, and that also doesn't seem to see any of the traffic on the external network/eth1.
I've tried enabling promiscuous inside the guest (ifconfig eth1 promisc) and "ifconfig -a" shows "PROMISC", but still I can't see any external traffic in tcpdump.
If I do something (e.g., ping www.google.com) from inside the guest, tcpdump DOES show that traffic.
Does anyone know what I might need to do to configure this guest so that it can see traffic on that eth1 interface from inside the guest?
Thanks,
Jimj