virtualbox.org

Can anyone explain the difference between the two promiscuous mode settings for a network adapter, "Allow VMs" versus "Allow All"? I'm using a virtual machine with WireShark monitoring a bridged virtual network interface. With promiscuous mode set to "Allow VMs" I thought that it would allow the virtual network adapter to monitor the real physical network in promiscuous mode. Instead, I have to set the virtual network interface to "Allow All" in order for the virtual network adapter to promiscuously monitor the real physical network adapter that is bridged. My question is, "What does 'Allow VMs' permit, and why would I use that versus 'Allow All?'

The help for VirtualBox does not explain these settings in any detail.

As I see it, allow vms means that you will only see traffic between virtual machines. I can see a genuine reason for wanting to use that. Allow all will show traffic from physical machines as well (ie all traffic on the network).