Reinstalled +Doug Burks's Security Onion Security Onion/ @ home. I find that Virtual Box seems to work better than VMware Player: vmware player is not happy with promiscuous mode, wants you to "chmod a+rw /dev/vm*", and even then I was not seeing traffic on the bridged interface. Also, Virtual Box allows snapshots.
