good morning
My scenario:
1. 2 ESXi 4.1 connected over one Vswitch
2. over Vswitch i use several type port groups properties
3. The phisycal switch are 2 dell powerconnect 5524
so i want create a single VM to install Snort and monitoring all traffic incoming and outcoming over Internet
my ideas:
1. go to switch dell e mirror the port (internet connection) over a new destination port
2. create a new port group over vswitch
3. Create a single VM with new port group and i get all traffic
Is a good direction my idea ?
Stefano