Wireshark-users: Re: [Wireshark-users] capturing traffic on a virtual interface
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 30 Jul 2009 07:49:09 +0200
On Wed, Jul 29, 2009 at 06:21:17PM -0700, Brian K wrote:
>    I have a 32-bit Vista virtual machine managed by Virtual PC running on a
>    64-bit Vista host. I have created a virtual NIC, which appears, I assume
>    because it's the default, as Intel DC21140 PCI Fast Ethernet Adapter. The
>    IP address I assigned to this NIC is 10.0.0.2. I am serving a Turbogears
>    test website on this address from the VM, and can view the website in a
>    browser on the VM. I can't, however, capture in Wireshark the HTTP traffic
>    that is being sent. Is it possible to capture this traffic?

No, if you are browsing the site (which is hoted on the VM) from within
the VM, then the traffic won't pass the NIC driver and won't pass the
WinPcap capture engine. Therefore Wireshark will not see the traffic.
You will have to browse the site from outside the VM to be able to see
the traffic in Wireshark.

Hope this helps,
Cheers,
     Sake