VMware Communities
EfiVg
Contributor
Contributor
‎10-13-2019 02:27 PM

Multiple Virtual Machines - malware analysis

Hi,

On page 66 of the book Practical_Malware_Analysis the author mentiond that several VMs can communicate together, while they are not connected to the host.

It's quite old an teams no longer exist (What happened to Teams? - VMware Workstation Zealot - VMware Blogs )

I've opened Virtual Network Editor. I added a new VMnet (VMnet 15), clicked on host-only, and then unchecked "connect a host virtual adapter to this network" is unchecked.

My host is still getting an IP (interface Ethernet adapter WMware Network adapter VMnet15 and he is able to ping both of the guests.

Can someone please tell me why? How can I fix it?

Much appreciated Smiley Happy

0 Kudos
3 Replies
EfiVg
Contributor
Contributor
‎10-14-2019 12:21 PM

I figured it out.

I should not add VMnet 15 in the Virtual Network Editor, so Vmnet 15 is not created on the host side.

Then, if both VMs are configured to work in VMnet 15 - they will be able to communicate with each other, but they won't be able to communicate with the host.

0 Kudos
continuum
Immortal
Immortal
‎10-15-2019 07:34 AM

Thats what we call guest-only vmnets - unfortunately that feature is not documented.


________________________________________________
Do you need support with a VMFS recovery problem ? - send a message via skype "sanbarrow"
I do not support Workstation 16 at this time ...

0 Kudos
EfiVg
Contributor
Contributor
‎10-16-2019 01:43 AM

It's OK I managed to figure it out - look at my comment

0 Kudos