VMware Cloud Community
FrankkVM
Contributor
Contributor

Wireshark on virtual macchine to sniffing physical PC

Hello, I would like to install wireshark inside a virtual machine (vm1) to monitor traffic in / out from a physical PC (pc1) external to the virtual infrastructure (vmware1) where is the vm1 installed.

The mirror is already configured on the switch which are connected PC1, vmware1, and obviously vm1, but how do I tell which port vm1 to sniff the traffic?

Before vm1 was also a physical PC, then sniffing the traffic from mirror port where he was connected, but now becoming a vm, I do not know how to do.

I would like if possible create a "isolate vlan" within vmware1 e use this only to sniff traffic outside from vmware1.

Thank you for your help.

0 Kudos
1 Reply
Alistar
Expert
Expert

Hi Frank,

create a separate Port Group only for the sniffing VM and move it there, and set its settings to "enable promiscuous mode" - it will then receive all packets that are designed to the subnet/VLAN.

Picture here: https___communities.vmware.com_servlet_JiveServlet_showImage_2-2246095-28625_Promiscuous.jpg

Stop by my blog if you'd like 🙂 I dabble in vSphere troubleshooting, PowerCLI scripting and NetApp storage - and I share my journeys at http://vmxp.wordpress.com/
0 Kudos