I am attempting to setup a snort VM in Player 3 to watch wireless networks.
My setup:
Host: Win 7 Pro x64
Guest: Ubuntu 9.05
I bridged eth0 and started eth0 with in listening mode like this:
auto eth1
iface eth1 inet manual
up ifconfig eth1 up
When I connect to a wireless network, I run
#tcpdump -i eth0
in an effort to see that the bridge is capturing the data properly. All that I can capture is broadcast traffic. That doesn't make a lot of sense. I am deliberately generating traffic over the wireless AP to get things to capture. I'm not certain if this is a Linux issue, Win 7 x64 issue, a VMWare Player issue or a wireless driver issue.
Any thoughts or suggestions? I'm not certain what data I need to provide to get assistance. Thanks in advance.
Matt
I use the "Alfa Network AWUS036H USB 2.0 Highpower WLAN Adapter"
along with a Backtrack VM.
This device maybe illegal in some countries as it is so powerful 😉
___________________________________
VMX-parameters- Workstation FAQ -[ MOA-liveCD|http://sanbarrow.com/moa241.html] - VM-Sickbay
the only way to use special Linux based wireless tools is to use an WLAN-USB-adapter directly attached to the Linux-VM.
If you use bridged network to a wireless adapter used by the host all you will see in the Linux guest is either a vlance,vmxnet or e1000 virtual adapter but NOT the wireless device
___________________________________
VMX-parameters- Workstation FAQ -[ MOA-liveCD|http://sanbarrow.com/moa241.html] - VM-Sickbay
OK. I do recall now hearing that this won't work correctly. Any idea why I would acquire ARP but nothing else? Just curious.
Anyone make a recommendation on a USB wireless card that will do what I want?
thanks.
I use the "Alfa Network AWUS036H USB 2.0 Highpower WLAN Adapter"
along with a Backtrack VM.
This device maybe illegal in some countries as it is so powerful 😉
___________________________________
VMX-parameters- Workstation FAQ -[ MOA-liveCD|http://sanbarrow.com/moa241.html] - VM-Sickbay
Thank you.