I am currently running a lab environment with qemu and a virtual switch (vde_switch). Since I am running on a Mac m1 (monterey), it was not possible to use a bridged connection (vde_switch does not have the -tap option on my Mac...). Therefore, I am using a socket to isolate the switch.
The lab machines are connected to this switch. I would like to be able to capture the traffic between the machines.
Is there a way to get tcpdump to use the socket as a source?
