Ask Your Question
0

VM Win 11 Wireshark is not working

asked 2024-01-27 10:47:35 +0000

dgullett gravatar image

Proxmox 8.1.4 VM Win 11 I have a customer requirement to provide a Windows 11 VM with 2 NICS. The first NIC is a Static IP for RDP, and the 2nd NIC is to Capture Packets from a switch. My customer does not have access to the Proxmox Host, only the guests. Win 11 VM - NIC 1 is vmbr031 and is dedicated to Cisco Switch Port 41 (Static IP Mgmt for Guest OS) - NIC 2 is vmbr032 and is dedicated to Cisco Switch Port 42 (Switch Monitoring Port) Everything works fine if I plug a physical Windows 11 computer into ports 41 and 42 of the switch.

All I get from vmbr032 are STP packets.

So, how do I get vmbr032 to see/collect the packets? I posted the same question on the Proxmox forum, but no luck. Hoping the Wireshark forum can help me.

edit retag flag offensive close merge delete

Comments

I'd look at how the vm nic is connected to the physical nic connecting to the switch span port.

Anders gravatar imageAnders ( 2024-01-28 20:36:02 +0000 )edit
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2024-01-29 12:38:06 +0000

dgullett gravatar image

updated 2024-01-29 13:09:46 +0000

grahamb gravatar image

I found the answer/statement in the post https://forum.proxmox.com/threads/pro...

My Summary:

The Linux Bridge is a switch, so it manages layer 2 (MAC) just like a switch, so only broadcast would be delivered to the VM NIC unless the traffic (frames) were intended for this NIC. So, my vmbr032 interface needed to be in "promiscuous mode." In order to do this, you have to add a line to this interface <bridge_ageing 0=""> see below in bold. Always take note at the top of /etc/network/interfaces "be careful."

auto vmbr032
iface vmbr032 inet manual
bridge-ports enp12s0
bridge-stp off
bridge-fd 0
bridge_ageing 0
edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2024-01-27 10:47:35 +0000

Seen: 319 times

Last updated: Jan 29