Hi all,
I'm attempting to configure dual SPAN ports to my Security Onion VM. However, when I attempt to assign vmbr3 as another interface, vmbr2's MAC shows as duplicate, so I cannot capture the intended traffic. As you can see, eth2 and eth1 share a common MAC address.
![1635197183199.png 1635197183199.png]()
Steps taken to validate/troubleshoot
Read more
I'm attempting to configure dual SPAN ports to my Security Onion VM. However, when I attempt to assign vmbr3 as another interface, vmbr2's MAC shows as duplicate, so I cannot capture the intended traffic. As you can see, eth2 and eth1 share a common MAC address.

Steps taken to validate/troubleshoot
- If I remove vmbr3, then eth2 is removed as well. If I reboot the VM, the MAC is persistent.
- If I disconnect vmbr3, eth2 shows disconnected in Security Onion
- If...
Read more