packet analysis

[pcrequest]

I want to set up a lab and do some wireshark labs. Does anyone know if in either VMWare Server or even MS Virtual PC if you can have a virtual network and do packet analysis? As in, can the network act as a hub which you can snoop on all the traffic from an observing pc, or is a switch where your cannot?

I'd also like learn about routing between subnets. Do either have a built in Layer 3 type switch?

[oreeh]

VMware Server uses virtual hubs.

There's no layer 3 routing possibility - you can of course build a router VM.

Can't speek for MSVPC since I avoid using this

[pcrequest]

so each VMnet is like a hub (or a switch?), and I can plug as many of my VM's into it. So I could use RRAS in WS2003 VM, first nic to VMnet3 and second nic to VMnet4 for example? Are there any other ways of doing this? I'm not too familiar if there are Linux routers, or virtual appliances.

[oreeh]

Yes, each vmnet you connect a VM to behaves like a hub.

Message was edited by:

oreeh

I'm pretty sure that there are prebuilt fireall/router appliances available.

Take a look at the appliances forum or the website.

[Leo_Smith]

if you set up the network adapter on your vm to promiscuous mode you will be able to sniff packets.