You are using Wireshark or snoop to observe network traffic, by using the observability node /dev/net/bridgeA. The bridge was created with: dladm create-bridge...