>> you are simply sniffing the wrong side of the SPS. >> sniff the downstream interface(s) instead of upstream. > wouldn't a tcpdump -i eth0 sniff rx tx?
You will get the NAT'd addresses with this. You want to listen on the vif* addresses. eth0 is the upstream interface. In your SPS it goes to the firewall. vif* are the downstream interfaces. They go to your VMs. If you want the individual IP addresses, you need to listen on all of the downstream interfaces. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/df45ef2e-2981-43a3-fa7d-8e53d25465fe%40undef.tools.
