I have two VMs and network configuration below :
VM1(192.168.1.10,client) -------------------- VM2 ( 192.168.1.20,also a web server ,listening on tcp port 80)
running the command of traffic capture from VM1:
VM1: tcpdump -i eth0 host 192.168.1.20 -w /tmp/traffic.pcap
then, VM1: curl 192.168.1.20
then we stop the traffic capture from both VMs , Since we know that this traffic capture from VM1, but what if we just share this file with someone who doesn't know where does the traffic capture from , is there any way for someone who has no idea about where the traffic capture from to identify where the traffic capture from ? thanks
