Platform: ESXi 6.7 running on a Dell PE T410 w/ Broadcom BCM5716 NICs
Purpose: Passive monitoring of network traffic (tcpdump, Snort, whatever...)
Configuration: I'm using a network hub (yes, an old fashioned hub!) with ISP on one port, internal network on another, and the "promiscuous" mode'd NIC/vSwitch PG on another
Packets are flying around, as the LAN is connected to the ISP through the hub. And a laptop NIC connected to a random hub port sees all the traffic. However, the Port Group / vSwitch is not passing the traffic to my RHEL VM with it's own NIC in promisc mode. It is only seeing router advertisements (IP6 gateway).
I've tried all I can think of and I'm going mad.
I've never used a VM on ESXi to monitor network traffic before. Always just had hardware taps. Any advice?
Thanks!