I’m trying to install Security Onion in a qube running debian 12 using the instructions here https://docs.securityonion.net/en/2.4/network-installation.html Unfortunately, the installer fails and tells me that Security Onion requires two NICs in order to work. Is there a way for me to add an addit…

[image] Cubes1: Unfortunately, the installer fails and tells me that Security Onion requires two NICs According to the same documentation , you can install some Node types (for example “Import”, which looks useful) with 1 NIC available. You’re not going to be able to run active sniffing throu…

No worries. On further notice, you have to use “sudo” in dom0, and I get some errors when running it… but the interface eth1 appears in the vm, with the specified mac address.

It would be helpful if you said what you want to use SO for. There are various documented uses which only require 1 NIC. If you want to monitor qubes traffic within the same machine this can be done fairly simply and SO is probably overkill I never presume to speak for the Qubes team. When I…

Qubes OS Forum

Security Onion qube

User Support General

MellowPoison September 11, 2025, 7:57am 2

Add dummy xen network interface to AppVM User Support

I need to use software in my AppVM with licensing that check for network adapter MAC address. If I add add net qube to my AppVM and change the eth0 MAC address then I can work with this software. I don’t want to have network in this AppVM but if I set net qube to ‘none’ then there won’t be eth0 device in AppVM. I’ve tried to use dummy interface: ip link add eth0 type dummy But the software won’t recognize it and seems to be looking for networking device in /sys/devices. I can create offlin…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled