Bridged networking and wireless packet capture

Discussions related to using VirtualBox on Linux hosts.
Post Reply
arty
Posts: 1
Joined: 9. Sep 2017, 03:11

Bridged networking and wireless packet capture

Post by arty »

I'm having a somewhat odd problem with bridged networking. I'm trying to create a lab where two vms are running centos 7 on my Ubuntu laptop, will communicate with each other over the wireless adapter, and another laptop will sniff the traffic with wireshark. The issue is that in wireshark I can see traffic to the router or external ips but nothing from vm to vm or vm to host.

Both VMs are using bridged adapters and my understanding was that all guest traffic is sent from the host's NIC to the router with the guest's IP and the host's MAC (meaning I should be able to see it in wireshark). What it looks like is happening is that Virtualbox sends directly to the other guest within the host. I'm not sure how to go about seeing where exactly the packets get diverted as they don't show up in wireshark on the host laptop either. I would very much like a better understanding of this if someone can point me in the right direction. Do bridged adapters communicate directly when connected to a wireless NIC? If so, is there a way force them to communicate through the router?
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Bridged networking and wireless packet capture

Post by socratis »

I'm not too strong in the networking, but the way that I understand it is the following:
[list]  WiFi
    |
  VBOX 
  /   \
VM1   VM2[/list]
Do you see any reason why VirtualBox should forward something to the WiFi and not use its knowledge of its own connections?
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
Post Reply