PLCNext ethernet interface promiscuous mode

Container @ PLCnext Technology
1

Dear PLCNext network,
I am trying to implement an Intrusion detection system (IDS) on an AXF2152 controller.
After setting up the IDS (Suricata) by using Podman, I encountered a problem:
Only activated alerts are the ones that involve PLC IP address.
My PLCNext controller is connected to a network via managed switch on which I mirror all network traffic.
By default, the IDS tool should set my eth0 network interface to promiscuous mode, but I am not seeing any alerts.
After manually setting my eth0 interface into promiscuous mode, I still don’t get packets which are not meant for my PLC.
image.pngAfter this, when I try to see my packets by using tcpdump command, I only get packets which are meant to be sent to/from PLC:

image.png
image.png957×785 89.4 KB
Is it actually possible to set my eth0 interface to promiscuous mode?
With regards,
fkatulic.

2

Hello fkatulic,
this is probably not helping because the AXC F 2152 has an internal switch chip that already filters traffic thats not meant for the device.
Eth0 → internal Switch KSZ → External Network.
kind regards,
Oliver