192.168.1.3 - user virtual machine.
192.168.2.5 - virtual machine with Snort and Wireshark (Monitor)
I want to monitor all traffic from eth1 using a virtual machine with Wireshark
I have configured VyOS interfaces. VyOS sees both virtual machines. The user virtual machine is configured with port forwarding so that it can access the Internet via VyOS.
I’m using VyOS 1.2.9, port configuration is below:
I thought for a bit. If I ping monitor IP - Wireshark sees these packets. It looks like they came from the VyOS interface, since they had a destination address that matches the address of the monitor. Then how can I force the VyOS interface to forward ALL traffic that comes to this interface to the monitor’s IP address?
At the same time, I need to save the original source address and destination address