This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark in VMWare Machines

0

I am new to Wireshark and would like to learn a lot. Since I'm a student I have only one Machine(laptop). But, in my laptop, I have installed VMWare Workstation 7. Now my question is...since Wireshark is a network packet analysis tool... Is it possible for me to practice Wireshark in a virtual machine. I mean, I would like to install a Server OS (basically Windows Server 2003) and 5 Win XP OS as a guest and connect them via NAT in the VMWare itself with the server. If this is not possible, then please anyone guide me as to how can i start learning and experiment Wireshark on my own. Any website that has a tutorial on Wireshark. Plzzzzzz Help!!!

asked 21 May '12, 04:13

silver_rain's gravatar image

silver_rain
5113
accept rate: 0%


One Answer:

1

Sure, you can run Wireshark in a VM. You could install as many VMs as you wish and run Wireshark on one of them, capturing the traffic of the others. That works especially well if you connect the VMs by using Host-Only networks, or in bridged mode. NAT might not work so well or give funny results, so for starters I'd recommend creating VMs that have a Host-Only Network to talk to each other. In my tests 3 VMs that have a host only network can see all traffic going back and forth like on a hubbed network, so that would be a nice start.

answered 21 May '12, 04:20

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thx for the reputation point @silver_rain, but if you really like the answer just accept it (round checkmark button below the tumbs up/down icons) ;-)

(21 May '12, 05:53) Jasper ♦♦