dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
6
share rss forum feed

pulsar777

join:2009-12-21
reply to norwegian

Re: Wireshark

so Wireshark running on the VMware virtual machine can analyze traffic on the physical network. That's what a wanted to clarify.



norwegian
Premium
join:2005-02-15
Outback

Yes.

I will let this good person's reply help you.

»ask.wireshark.org/questions/516/···n-vmware
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke



Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON
kudos:10
Reviews:
·TekSavvy DSL
·Bell Fibe
reply to pulsar777

said by pulsar777:

so Wireshark running on the VMware virtual machine can analyze traffic on the physical network. That's what a wanted to clarify.

Yes. See the above link posted by norwegian See Profile. If the VMware is on linux you'll be using tcpdump to capture the packets which you can later load and analyze in wireshark on any other machine.


AVD
Respice, Adspice, Prospice
Premium
join:2003-02-06
Onion, NJ
kudos:1

does it do anything if you are on a switch (I mean yeah, it could sniff all the packets going on all the virtual machines on a physical one)
--
* seek help if having trouble coping
--Standard disclaimers apply.--



WireHead
I drive to fast
Premium
join:2001-05-09
Muncie, IN

Yes you can port mirror then on the monitoring system use wire shark to sniff.



AVD
Respice, Adspice, Prospice
Premium
join:2003-02-06
Onion, NJ
kudos:1

Don't you need some sort of administrative access to the switch? Its not like a vendor can plug in a laptop in the conference room and sniff out our emails during his powerpoint?
--
* seek help if having trouble coping
--Standard disclaimers apply.--



WireHead
I drive to fast
Premium
join:2001-05-09
Muncie, IN

Yes you need admin access the the managed switch.



norwegian
Premium
join:2005-02-15
Outback

Managed switch is one thing, why would a standard switch even have an admin panel or anything controlling over the network? I can sniff my internal network via the router's switch.

I think a little more specific clarification is needed to discuss the depth's of sniffing.



WireHead
I drive to fast
Premium
join:2001-05-09
Muncie, IN

The vendor should never be exposed to anything but a guest vlan/wlan.



norwegian
Premium
join:2005-02-15
Outback

1 edit

And the OP's question might need explaining more, as there is a yes/no type answer to the question. Yes a VM will allow sniffed traffic. Will it allow all traffic to be sniffed? Depends on the network. Hence my comment initially on what is the network we are referring to from the OP, it is too broad a comment I'd think to give an exacting reply. Call me pedantic.