Подскажите, куда смотреть?
root@vmhost01:~# tcpdump -ne -i tapvm1 icmp or arp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tapvm1, link-type EN10MB (Ethernet), capture size 262144 bytes
11:34:33.523793 de:e6:73:da:5a:21 > 00:50:56:a5:03:3e, ethertype IPv4 (0x0800), length 98:
192.168.7.101 >
192.168.7.100: ICMP echo request, id 14436, seq 56, length 64
11:34:34.524128 de:e6:73:da:5a:21 > 00:50:56:a5:03:3e, ethertype IPv4 (0x0800), length 98:
192.168.7.101 >
192.168.7.100: ICMP echo request, id 14436, seq 57, length 64
11:34:35.524678 de:e6:73:da:5a:21 > 00:50:56:a5:03:3e, ethertype IPv4 (0x0800), length 98:
192.168.7.101 >
192.168.7.100: ICMP echo request, id 14436, seq 58, length 64
^C
3 packets captured
3 packets received by filter
0 packets dropped by kernel
root@vmhost01:~# tcpdump -ne -i vlan7 icmp or arp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vlan7, link-type EN10MB (Ethernet), capture size 262144 bytes
11:34::50:56:a5:03:3e > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has
192.168.7.101 tell
192.168.7.100, length 28
11:34::50:56:a5:03:3e > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has
192.168.7.101 tell
192.168.7.100, length 28
11:34:47.571856 00:50:56:a5:03:3e > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has
192.168.7.101 tell
192.168.7.100, length 28