Live capture of network traffic between guest and host Win10

[Tom 2018]

Hi,

Today I noticed that in Windows 10 it is not possible to capture the network traffic between the host and the guest system (when using bridged network).
As explained here https://www.virtualbox.org/wiki/Network_tips you can make .pcap capture files of all traffic on the guest NIC. Unfortunately this is not easy to use when you want to do live monitoring.

I found there is a way to do remote capture in Wireshark https://www.wireshark.org/docs/wsug_htm ... ction.html.

So I thought it would be a nice feature if you could set a port in VirtualBox that wireshark can connect to as "remote capture interface"? This way you could do live monitoring of all network adapters created in VB.

[michaln]

Unfortunately this is not easy to use when you want to do live monitoring.

'VBoxManage controlvm <vm> nictrace1 on' does not work?

[Tom 2018]

Isn't that for tracing to a file? I want the packets to appear live in Wireshark, is that possible with this?

[michaln]

Yes, to a file. If it's too difficult to hit the "reload" button in Wireshark then I guess it can't be used.