If there's a better way to configure a VM for traffic sniffing, I'd be interested in hearing...
as would i. :-/
my understanding (?) is that passthru to PV domu need to be eliminated to avoid the aforementioned security hole.
that leaves passthru to HVM -- which requires AMD-V (or intel VT-d ...) extension support. and, i _think_ that means xen ver >= 3.2.0 is required.
fedora9's not an option. fedora8's "not going to support it" policy, though understandable on the march to paravirt_ops, leaves little to lean on in terms of community support ...
best option i'm finding so far is Centos51, with a rpmrebuild of xen 320 from src rpm,
http://bits.xensource.com/oss-xen/release/3.2.0/centos-5.1/xen-3.2.0-0xs.cen...
(if there's a 3.2.1 src rpm available, i haven't found it yet ...)
in the process of trying it myself ...