Announcement

Collapse
No announcement yet.

Network tracing confusion

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Network tracing confusion

    hi ,
    see the attached drawing for network structure


    All systems running under VMware Workstation v6.5
    Two virtual Setupís depicted as shown with the difference , one with VMnet1 virtual Switch and other with LAN Segment ( the one available when VM teams are configured ) . Wireshark has been installed on specific systems as shown.

    Now hereís the Question Ö
    When Xp-sp3-01 would communicate with Xp-sp3-02 ( suppose it pings the targeted system or open its default admin SMB shares ) ,would Xp-sp3-06 be able to able to capture all the traffic ( in the network traffic of WHICH it was not EVEN part of )

    In mine both Setupís , I m able to get all the network data captured by Xp-sp3-06 inspite of the fact that IT WAS NOT INTENDED TO BE PART OF THAT TRAFFIC .


    See the attached Wireshark traces ( traced on Xp-sp3-06 ) .

    | Now is this really a Problem or this is how Wireshark operates |
    | Or this only Exists with Virtual VMware Networks |
    | Or this is Ethernet technology behavior |
    | Does this even happen with Physical networks with a single subnet |



    network traces download URL

    Lan segment trace :http://rapidshare.com/files/19733674...ment-1.7z.html
    VMnet Virtual Switch trace : http://rapidshare.com/files/197337162/VMnet1.7z.html
    Attached Files
    Last edited by harmandeep; 15th February 2009, 20:21.
    Blog: http://VirtualizationMaximus.com
    OS ... VirTuaLiZaTioN ... MaxiMuS ... Fair, Good, Better, Best



  • #2
    Re: Network tracing confusion

    Couldn't you simply post the question into the forum?
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Network tracing confusion

      Turn off P mode on the vswitch

      Comment


      • #4
        Re: Network tracing confusion

        Originally posted by Garen View Post
        Turn off P mode on the vswitch
        And how to do that on windows host ....
        Last edited by harmandeep; 13th February 2009, 02:30.
        Blog: http://VirtualizationMaximus.com
        OS ... VirTuaLiZaTioN ... MaxiMuS ... Fair, Good, Better, Best


        Comment


        • #5
          Re: Network tracing confusion

          Originally posted by Garen View Post
          Turn off P mode on the vswitch
          Thanks GAREN
          +1 mate

          finally , i was able to Implement No Promiscuous mode on VMware Guest OS.es Ethernet Card.s via VMX Configuration Parameter ....
          ethernet0.noPromisc = "true"

          Source : http://sanbarrow.com/vmx.html

          But still the host Machine Virtual Ethernet Switch Adapter was able to sniff all the network traffic of the Guest OSes Linked to it ..... anyway to enable No P mode on Host Machine ( Windows ) Virtual Ethernet Switch Adapter ....
          Last edited by harmandeep; 13th February 2009, 16:44.
          Blog: http://VirtualizationMaximus.com
          OS ... VirTuaLiZaTioN ... MaxiMuS ... Fair, Good, Better, Best


          Comment


          • #6
            Re: Network tracing confusion

            Hmm Am I getting ignored???
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Re: Network tracing confusion

              Originally posted by Dumber View Post
              Hmm Am I getting ignored???
              No MOD , Limited attachments only and only if they are required .....

              MOD a Day keeps ma problems away

              So sir , any help


              Regards
              Harmandeep
              Blog: http://VirtualizationMaximus.com
              OS ... VirTuaLiZaTioN ... MaxiMuS ... Fair, Good, Better, Best


              Comment


              • #8
                Re: Network tracing confusion

                First my name is not MOD.
                Second, post the text in the forum.
                Otherwise it isn't searchable and will this become a useless topic for other members..
                Post only images when it contains a drawing but keep the text in the forum.
                Marcel
                Technical Consultant
                Netherlands
                http://www.phetios.com
                http://blog.nessus.nl

                MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                "No matter how secure, there is always the human factor."

                "Enjoy life today, tomorrow may never come."
                "If you're going through hell, keep going. ~Winston Churchill"

                Comment


                • #9
                  Re: Network tracing confusion

                  Originally posted by Dumber View Post
                  First my name is not MOD.
                  Second, post the text in the forum.
                  Otherwise it isn't searchable and will this become a useless topic for other members..
                  Post only images when it contains a drawing but keep the text in the forum.
                  Done Marcel
                  Blog: http://VirtualizationMaximus.com
                  OS ... VirTuaLiZaTioN ... MaxiMuS ... Fair, Good, Better, Best


                  Comment

                  Working...
                  X