SNIFFING TRAFFIC ON HYPER V

[Sascorr]

Version

2.4.30

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Meets minimum requirements

CPU

4

RAM

32

Storage for /

500gb

Storage for /nsm

300

Network Traffic Collection

span port

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

I had the previous SO version befor 2.4 that was working fine on hyper V however, after deleting that instance and install the new version (2,4) its not seeing mirrored traffic anymore. the vNIC port mirroring is set to destination and the physical NIC also configured properly. I need help on this please

Guidelines

• I have read the above statement and can confirm my post is relevant to Security Onion 2.4.

[Sascorr]

i figured it out... no thanks but thanks for providing SO. cheers