multiple capture interfaces on a virtual environment

[RenatoAbreu]

Hello All,

I am deploying a virtual environment of Netwitness for Packets that needs more than one capture interface receiving traffic on the Packet Decoder.

During the installation, I realized that the Virtual Packet Decoder OVA comes with only 2 network interfaces. Since one of them is for mgmt, I would have to add a new one so I can have two interfaces for traffic capture.

I also realized that, on the Packet Decoder configuration, I can only select one capture interface from the dropdown presented on the GUI.

I'd like to know if I can add a new network interface to the packet decoder virtual machine normally and if there is a way to select more than one capture interface on the packet decoder.

I also need to set an IP address to one of these capture interfaces.

Could I set an IP to this interface as well?

Could any one help me with this?

Thanks in advance.

[JohnSnider]

The management interface needs to be eth0 or em1 for a device name. 

Additional interfaces: eth1, eth2, eth3... or em2, em3, em4... can be added at any time, they DO NOT need to have an IP set on them.

In the decoder config, there should be an option for "capture interface selected", if you select "packet_mmap_,ALL (bpf)", that will capture from ALL interfaces EXCEPT ones named eth0 or em1