wireshark cannot capture VM traffic

Here is my setup:

  • A windows 7 laptop running as a host running VirtualBox
  • Inside Virtualbox, I have a debian VM.
  • The eth0 of the VM is created as a bridged device from the physical ethernet port on the laptop
  • On Windows, I run wireshark and sniff the ethernet device.

When I try to a host in the wild internet from the VM, it works but I can't capture any packets. But if I ping the laptop's IP address, wireshark sees the icmp traffic without problem.

Why is that?

1 Answer

You're using a bridged adapter which Wireshark cannot see. Basically, the bridging completely bypasses your laptop OS's network stack, so to your laptop this information isn't even being displayed.

If you wanted to capture data, you'd need to use NAT mode and port forward the ports for your guest. See this for detailed information.

3

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

You Might Also Like