PaulDotCom mailing list archives
Re: VMware Player and promiscuous mode?
From: Steve Passino <spassino () mac com>
Date: Mon, 14 May 2012 20:34:31 -0400
Not sure if this applies to vmplayer - but check your network settings to make sure the VM is granted access to run the network card in promisc mode. With virtualbox, I know there is a setting to allow/disallow the virtual network interface the ability to go into promisc - making a bit of a guess here that vmplayer has the same set of controls...... On Mon, 2012-05-14 at 11:53 -0500, Todd Haverkos wrote:
Timothy Ouellette <touellette83 () gmail com> writes:I am running into problems getting my Ethernet adapter in backtrack to run in promiscuous mode. Currently running Ubuntu 12.04 LTS as the host OS with VM Player 4.02 installed. I setup Backtrack 5R2 as a Virtual Machine in player and all is working great, however i cannot figure out how to get the Ethernet adapter in promiscuous mode.Hi Timothy, I'm not sure if what you're attempting is possible (and I'd argue that's a feature as, when using virtual machines defensively, or for malware analysis, I surely wouldn't want a compromised guest OS having access to host machine network traffic). On the other hand, I'm not sure what that noPromisc setting really intends to do. When I want to see things at the host OS level, I'd probably take a native tcpdump on the host Ubuntu server and then pull that file into analysis in wireshark in the virtual machine. Another alternative is to run Wireshark directly under the Ubuntu host OS (sudo apt-get install wireshark). You probably already know, but whenever wireshark is mentioned, I feel compelled to stress the importance of keeping Wireshark up to date to minimize the chance of getting owned while analyzing possibly malicious network traffic. Best Regards, -- Todd Haverkos, LPT MsCompE http://haverkos.com/ _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
Current thread:
- VMware Player and promiscuous mode? Timothy Ouellette (May 02)
- Re: VMware Player and promiscuous mode? Todd Haverkos (May 14)
- Re: VMware Player and promiscuous mode? Steve Passino (May 14)
- Re: VMware Player and promiscuous mode? Pat Moloney (May 15)
- Re: VMware Player and promiscuous mode? Steve Passino (May 14)
- Re: VMware Player and promiscuous mode? Todd Haverkos (May 14)