Wireshark running on Host OS not capturing packets from VMVirtualBox and missing packets in...

Examples of a statistic that is not independent of sample's distribution?

Vocabulary for giving just numbers, not a full answer

What does "the touch of the purple" mean?

What problems would a superhuman have whose skin is constantly hot?

Conservation of Mass and Energy

Makefile strange variable substitution

Why does liquid water form when we exhale on a mirror?

Accountant/ lawyer will not return my call

Good for you! in Russian

Is it possible to avoid unpacking when merging Association?

'The literal of type int is out of range' con número enteros pequeños (2 dígitos)

Dropdown com clique

Reverse string, can I make it faster?

Distinction between apt-cache and dpkg -l

Does "Until when" sound natural for native speakers?

Are tamper resistant receptacles really safer?

How can I get players to stop ignoring or overlooking the plot hooks I'm giving them?

Definition of Statistic

Am I not good enough for you?

Declaring and defining template, and specialising them

Bash script should only kill those instances of another script's that it has launched

Recommendation letter by significant other if you worked with them professionally?

Why does the negative sign arise in this thermodynamic relation?

PTIJ: Should I kill my computer after installing software?



Wireshark running on Host OS not capturing packets from VM


VirtualBox and missing packets in wiresharkConnecting a webserver from host to guest vmware os?ICMP Fails after first packetEthernet Data Traffic hidden from Wireshark captureCan't Ping Ubuntu Guest from Windows 7 HostWireshark only captures packets to or from this devicevmware workstation Cannot change network to bridgedWireshark for capturing packets on bridged interface in VMWareWireshark capturing packets between VMs on the Host-Only Network in VirtualBoxUsing wireshark to only capture the traffic between my computer and a specific host













0















I have Wireshark running on my laptop (Ubuntu 18.04), and I also have Wireshark running inside a VMware Workstation Player with a Backtrack 5 Kali Linux virtual machine image. The VM Network Connection is set to NAT. I cannot get the Wireshark that is running on the Host OS (Ubuntu) to capture pings from the VM (Kali). I can, however, capture pings from Host to VM with the Wireshark running in the VM. Host to VM pings do not show up in the Host Wireshark either while capturing from "any".



Running ifconfig on Host gives: (omitting enp3s0 and lo)



vmnet1: inet 192.168.117.1
vmnet8: inet 192.168.81.1
wlp2s0: inet 192.168.1.18


Running ifconfig on VM gives: (omitting lo)



eth1: inet 192.168.81.128


From Host, if I run ping 192.168.81.128, the Wireshark running in the VM captures the packets. Here's a pair of the requests and replies:



No. Time        Source          Destination     Protocol        Info
199 3050.809885 192.168.81.1 192.168.81.128 ICMP Echo (ping) request
200 3050.809914 192.168.81.128 192.168.81.1 ICMP Echo (ping) reply


From VM, if I run ping 192.168.1.18 or ping 192.168.81.1 or ping 192.168.117.1,the pings come back successfully and Wireshark running in the VM captures the traffic, but the Host Wireshark captures nothing.



I've tried disabling my Host firewall with sudo ufw disable, but it was already disabled and changed nothing. I've also tried switching the VM Network Connection from NAT to both Bridged and Host-only, but all that resulted in were Host Destination Unreachable replies when using ping on either the Host or VM.



I've included the vmnet1 and vmnet8 inet addresses because they seem to be associated with the VMware Workstation Player, but they don't really seem to be relevant to my problem. But I don't know, maybe they are.



Also there are no Capture Filters or Display Filters running on either the VM Wireshark or the Host Wireshark, and the Host Wireshark is able to capture packets from other sources.



Any idea why the Host Wireshark can't capture packets sent from my Virtual Machine to my Host Machine?










share|improve this question























  • Which network packets do you want to capture? Packets between host and guest or packets between guest and internet?

    – Biswapriyo
    9 mins ago











  • I want to capture packets between host and guest. I'm sending packets from guest to host.

    – Dopevoponop
    6 mins ago
















0















I have Wireshark running on my laptop (Ubuntu 18.04), and I also have Wireshark running inside a VMware Workstation Player with a Backtrack 5 Kali Linux virtual machine image. The VM Network Connection is set to NAT. I cannot get the Wireshark that is running on the Host OS (Ubuntu) to capture pings from the VM (Kali). I can, however, capture pings from Host to VM with the Wireshark running in the VM. Host to VM pings do not show up in the Host Wireshark either while capturing from "any".



Running ifconfig on Host gives: (omitting enp3s0 and lo)



vmnet1: inet 192.168.117.1
vmnet8: inet 192.168.81.1
wlp2s0: inet 192.168.1.18


Running ifconfig on VM gives: (omitting lo)



eth1: inet 192.168.81.128


From Host, if I run ping 192.168.81.128, the Wireshark running in the VM captures the packets. Here's a pair of the requests and replies:



No. Time        Source          Destination     Protocol        Info
199 3050.809885 192.168.81.1 192.168.81.128 ICMP Echo (ping) request
200 3050.809914 192.168.81.128 192.168.81.1 ICMP Echo (ping) reply


From VM, if I run ping 192.168.1.18 or ping 192.168.81.1 or ping 192.168.117.1,the pings come back successfully and Wireshark running in the VM captures the traffic, but the Host Wireshark captures nothing.



I've tried disabling my Host firewall with sudo ufw disable, but it was already disabled and changed nothing. I've also tried switching the VM Network Connection from NAT to both Bridged and Host-only, but all that resulted in were Host Destination Unreachable replies when using ping on either the Host or VM.



I've included the vmnet1 and vmnet8 inet addresses because they seem to be associated with the VMware Workstation Player, but they don't really seem to be relevant to my problem. But I don't know, maybe they are.



Also there are no Capture Filters or Display Filters running on either the VM Wireshark or the Host Wireshark, and the Host Wireshark is able to capture packets from other sources.



Any idea why the Host Wireshark can't capture packets sent from my Virtual Machine to my Host Machine?










share|improve this question























  • Which network packets do you want to capture? Packets between host and guest or packets between guest and internet?

    – Biswapriyo
    9 mins ago











  • I want to capture packets between host and guest. I'm sending packets from guest to host.

    – Dopevoponop
    6 mins ago














0












0








0








I have Wireshark running on my laptop (Ubuntu 18.04), and I also have Wireshark running inside a VMware Workstation Player with a Backtrack 5 Kali Linux virtual machine image. The VM Network Connection is set to NAT. I cannot get the Wireshark that is running on the Host OS (Ubuntu) to capture pings from the VM (Kali). I can, however, capture pings from Host to VM with the Wireshark running in the VM. Host to VM pings do not show up in the Host Wireshark either while capturing from "any".



Running ifconfig on Host gives: (omitting enp3s0 and lo)



vmnet1: inet 192.168.117.1
vmnet8: inet 192.168.81.1
wlp2s0: inet 192.168.1.18


Running ifconfig on VM gives: (omitting lo)



eth1: inet 192.168.81.128


From Host, if I run ping 192.168.81.128, the Wireshark running in the VM captures the packets. Here's a pair of the requests and replies:



No. Time        Source          Destination     Protocol        Info
199 3050.809885 192.168.81.1 192.168.81.128 ICMP Echo (ping) request
200 3050.809914 192.168.81.128 192.168.81.1 ICMP Echo (ping) reply


From VM, if I run ping 192.168.1.18 or ping 192.168.81.1 or ping 192.168.117.1,the pings come back successfully and Wireshark running in the VM captures the traffic, but the Host Wireshark captures nothing.



I've tried disabling my Host firewall with sudo ufw disable, but it was already disabled and changed nothing. I've also tried switching the VM Network Connection from NAT to both Bridged and Host-only, but all that resulted in were Host Destination Unreachable replies when using ping on either the Host or VM.



I've included the vmnet1 and vmnet8 inet addresses because they seem to be associated with the VMware Workstation Player, but they don't really seem to be relevant to my problem. But I don't know, maybe they are.



Also there are no Capture Filters or Display Filters running on either the VM Wireshark or the Host Wireshark, and the Host Wireshark is able to capture packets from other sources.



Any idea why the Host Wireshark can't capture packets sent from my Virtual Machine to my Host Machine?










share|improve this question














I have Wireshark running on my laptop (Ubuntu 18.04), and I also have Wireshark running inside a VMware Workstation Player with a Backtrack 5 Kali Linux virtual machine image. The VM Network Connection is set to NAT. I cannot get the Wireshark that is running on the Host OS (Ubuntu) to capture pings from the VM (Kali). I can, however, capture pings from Host to VM with the Wireshark running in the VM. Host to VM pings do not show up in the Host Wireshark either while capturing from "any".



Running ifconfig on Host gives: (omitting enp3s0 and lo)



vmnet1: inet 192.168.117.1
vmnet8: inet 192.168.81.1
wlp2s0: inet 192.168.1.18


Running ifconfig on VM gives: (omitting lo)



eth1: inet 192.168.81.128


From Host, if I run ping 192.168.81.128, the Wireshark running in the VM captures the packets. Here's a pair of the requests and replies:



No. Time        Source          Destination     Protocol        Info
199 3050.809885 192.168.81.1 192.168.81.128 ICMP Echo (ping) request
200 3050.809914 192.168.81.128 192.168.81.1 ICMP Echo (ping) reply


From VM, if I run ping 192.168.1.18 or ping 192.168.81.1 or ping 192.168.117.1,the pings come back successfully and Wireshark running in the VM captures the traffic, but the Host Wireshark captures nothing.



I've tried disabling my Host firewall with sudo ufw disable, but it was already disabled and changed nothing. I've also tried switching the VM Network Connection from NAT to both Bridged and Host-only, but all that resulted in were Host Destination Unreachable replies when using ping on either the Host or VM.



I've included the vmnet1 and vmnet8 inet addresses because they seem to be associated with the VMware Workstation Player, but they don't really seem to be relevant to my problem. But I don't know, maybe they are.



Also there are no Capture Filters or Display Filters running on either the VM Wireshark or the Host Wireshark, and the Host Wireshark is able to capture packets from other sources.



Any idea why the Host Wireshark can't capture packets sent from my Virtual Machine to my Host Machine?







networking virtual-machine vmware wireshark ubuntu-18.04






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 1 hour ago









DopevoponopDopevoponop

11




11













  • Which network packets do you want to capture? Packets between host and guest or packets between guest and internet?

    – Biswapriyo
    9 mins ago











  • I want to capture packets between host and guest. I'm sending packets from guest to host.

    – Dopevoponop
    6 mins ago



















  • Which network packets do you want to capture? Packets between host and guest or packets between guest and internet?

    – Biswapriyo
    9 mins ago











  • I want to capture packets between host and guest. I'm sending packets from guest to host.

    – Dopevoponop
    6 mins ago

















Which network packets do you want to capture? Packets between host and guest or packets between guest and internet?

– Biswapriyo
9 mins ago





Which network packets do you want to capture? Packets between host and guest or packets between guest and internet?

– Biswapriyo
9 mins ago













I want to capture packets between host and guest. I'm sending packets from guest to host.

– Dopevoponop
6 mins ago





I want to capture packets between host and guest. I'm sending packets from guest to host.

– Dopevoponop
6 mins ago










0






active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1413267%2fwireshark-running-on-host-os-not-capturing-packets-from-vm%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1413267%2fwireshark-running-on-host-os-not-capturing-packets-from-vm%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Couldn't open a raw socket. Error: Permission denied (13) (nmap)Is it possible to run networking commands...

VNC viewer RFB protocol error: bad desktop size 0x0I Cannot Type the Key 'd' (lowercase) in VNC Viewer...

Why not use the yoke to control yaw, as well as pitch and roll? Announcing the arrival of...