# Monitor the traffic to qemu

**URL:** <https://community.zeek.org/t/monitor-the-traffic-to-qemu/3987>\
**Category:** Zeek\
**Created:** [January 28, 2016, 3:45pm UTC](https://community.zeek.org/t/monitor-the-traffic-to-qemu/3987 "2016-01-28T15:45:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mahboobe\_daftari](https://avatars.discourse-cdn.com/v4/letter/m/9fc348/32.png) [@mahboobe\_daftari](https://community.zeek.org/u/mahboobe_daftari)\
**Post date:** [January 28, 2016, 3:45pm UTC](https://community.zeek.org/t/monitor-the-traffic-to-qemu/3987/1 "2016-01-28T15:45:27Z")

</div>

Hello,

I have Ubuntu installed as a host system with Debian running as the guest system on qemu. I need to send created traffic from the host to an Apache web server installed on the guest and monitor this traffic using bro which is installed on the host.  
What is the best way to make this connection? I would really appreciate if you could provide me with a link or something on how to make the bridge. I have tried several ways but haven’t been successful yet!

Thank you so much in advance,  
Mahboobeh

---

<div class="post-metadata">

**Author:** ![Christian\_Struck](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@Christian\_Struck](https://community.zeek.org/u/Christian_Struck)\
**Post date:** [January 28, 2016, 4:05pm UTC](https://community.zeek.org/t/monitor-the-traffic-to-qemu/3987/2 "2016-01-28T16:05:25Z")

</div>

Hi,

> Hello,
> 
> I have Ubuntu installed as a host system with Debian running as the  
> guest system on qemu. I need to send created traffic from the host to an  
> Apache web server installed on the guest and monitor this traffic using  
> bro which is installed on the host.  
> What is the best way to make this connection? I would really appreciate  
> if you could provide me with a link or something on how to make  
> the bridge. I have tried several ways but haven't been successful yet!

I think you could just tap bro to the virtual ethernet interface of your  
VM, I'm not very familiar with using only QEMU but I think the  
networking section in their documentation should help you. There is also  
a monitoring subsection.

[http://wiki.qemu.org/Documentation/Networking](http://wiki.qemu.org/Documentation/Networking)

Best regards

Christian

---

<div class="post-metadata">

**Author:** ![Jason\_Lynch](https://avatars.discourse-cdn.com/v4/letter/j/f6c823/32.png) [@Jason\_Lynch](https://community.zeek.org/u/Jason_Lynch)\
**Post date:** [January 28, 2016, 7:53pm UTC](https://community.zeek.org/t/monitor-the-traffic-to-qemu/3987/3 "2016-01-28T19:53:48Z")

</div>

Openvswitch has port mirroring capability if you would like to go that route on your VM host:

[http://git.openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob\_plain;f=FAQ;hb=HEAD](http://git.openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob_plain;f=FAQ;hb=HEAD)

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/monitor-the-traffic-to-qemu/3987/4 "2022-05-06T15:43:22Z")

</div>