Does the internal virtual switch ignore ARPs?
-
scuba7183
- Posts: 1
- Joined: 17. Apr 2011, 20:54
- Primary OS: MS Windows 7
- VBox Version: VirtualBox+Oracle ExtPack
- Guest OSses: Linux, Win XP
Does the internal virtual switch ignore ARPs?
Hi, I'm trying to emulate a man-in-the-middle attack for a college security class. I have 3 ubuntu 10.10 guests running in a windows 7 host running VBox 4.0.4. When running ettercap in one of the guests, it's ARP poisoning does not seem to be working.
-
Sasquatch
- Volunteer
- Posts: 17798
- Joined: 17. Mar 2008, 13:41
- Primary OS: Debian other
- VBox Version: VirtualBox+Oracle ExtPack
- Guest OSses: Windows XP, Windows 7, Linux
- Location: /dev/random
Re: Does the internal virtual switch ignore ARPs?
Odd, I have done a lab situation to test Windows 2008 R2 with RRAS VPN and Windows 7 and Ubuntu as clients. When I ran tcpdump, I did see ARP requests. Perhaps your arp poisoning isn't working.
Read the Forum Posting Guide before opening a topic.
VirtualBox FAQ: Check this before asking questions.
Online User Manual: A must read if you want to know what we're talking about.
Howto: Install Linux Guest Additions
Howto: Use Shared Folders on Linux Guest
See the Tutorials and FAQ section at the top of the Forum for more guides.
Try searching the forums first with Google and add the site filter for this forum.
E.g. install guest additions site:forums.virtualbox.org
Retired from this Forum since OSSO introduction.
VirtualBox FAQ: Check this before asking questions.
Online User Manual: A must read if you want to know what we're talking about.
Howto: Install Linux Guest Additions
Howto: Use Shared Folders on Linux Guest
See the Tutorials and FAQ section at the top of the Forum for more guides.
Try searching the forums first with Google and add the site filter for this forum.
E.g. install guest additions site:forums.virtualbox.org
Retired from this Forum since OSSO introduction.
-
Technologov
- Volunteer
- Posts: 3342
- Joined: 10. May 2007, 16:59
- Location: Israel
Re: Does the internal virtual switch ignore ARPs?
AFAIK the internal switch is actually internal hub.
-
BillG
- Volunteer
- Posts: 5106
- Joined: 19. Sep 2009, 04:44
- Primary OS: MS Windows 10
- VBox Version: VirtualBox+Oracle ExtPack
- Guest OSses: Windows 10,7 and earlier
- Location: Sydney, Australia
Re: Does the internal virtual switch ignore ARPs?
I agree. I have Network Monitor 3.4 running on a virtual machine in an internal network and it sees all traffic including ARP requests.Sasquatch wrote:Odd, I have done a lab situation to test Windows 2008 R2 with RRAS VPN and Windows 7 and Ubuntu as clients. When I ran tcpdump, I did see ARP requests. Perhaps your arp poisoning isn't working.
Bill
-
BillG
- Volunteer
- Posts: 5106
- Joined: 19. Sep 2009, 04:44
- Primary OS: MS Windows 10
- VBox Version: VirtualBox+Oracle ExtPack
- Guest OSses: Windows 10,7 and earlier
- Location: Sydney, Australia
Re: Does the internal virtual switch ignore ARPs?
Screenshot of ARP request on internal network.
Bill