Duknow if make actual sense on Qubes, but i used the following successfully on XenServer/XCP-ng, inbound traffic is not visible to SecurityOnion otherwise as originally targetting the tapped network from my understanding:
> https://blog.rootshell.be/2013/09/09/xenserver-port-mirroring/ > > Hope that helps, > > Peace! This information didn't really help me to solve the problem. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/r5iZaiDmyACYEHpp_M92h5-5lPZ0FGPrcGWcFGlhWk2OXpbGNk6QLEMqtnVgLBwSkK_2FxAYIbl8AWU9hX1sdPjtaNQyLZ29AKXvpxXAjbk%3D%40protonmail.com.
publickey - letmereadit@protonmail.com - 0xEE010E73.asc
Description: application/pgp-keys
signature.asc
Description: OpenPGP digital signature