[Winpcap-users] Traffic from VMWare application with WinPcap

[Gianluca Varenni]

I think VmWare uses an NDIS Intermediate (IM) driver sitting below the 
WinPcap driver. In this case you won't see the guest packets as they are 
managed by the IM driver sitting below WinPcap. But you can probably capture 
the VM traffic on the virtual network interfaces created by VMware itself.

I don't know if it's possible with WinPcap to sniff the VM traffic. It's 
definitely feasible, but I guess you would need another NDIS intermediate 
driver sitting below the VMware one.

Have a nice day
GV

----- Original Message ----- 
From: mlimade-vm03 at yahoo.com.br
To: winpcap-users at winpcap.org
Sent: Tuesday, August 19, 2008 4:57 PM
Subject: [Winpcap-users] Traffic from VMWare application with WinPcap


  Hi,

  I have tried an application of traffic monitor by application based on
WinPCap library, but I have a special need, that is detect the traffic from
a virtual machine based on VMWare technology. I install the traffic monitor
inside a Windows XP Virtual machine and the traffic inside is detected, but
I was expecting that if I install it in the VM host machine the monitor 
detects
the traffic how if it come from the VMWare Player application, but it not
happens, like no traffic exists. The VMWare player create virtual networks,
but the real traffic is bridged to real NIC and should be detected, or not?
Maybe, VMWare Player use an unpredictable way to access network.
There a way to detect it? Because I need to know how much traffic each
VM is using amog many VM's without put a traffic monitor por each one,
but only in the host machine.

Thanks for advance

Mauricio Lima





Novos endereços, o Yahoo! que você conhece. Crie um email novo com a sua 
cara @ymail.com ou @rocketmail.com.



_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users