Wireshark, Virtualbox and vanishing packets

[Mark R]

I've been tinkering with an Ubuntu 64 server, and am doing the config work in a VirtualBox hosted on Vista 32.

I'd been having a bit of difficulty setting up a couple of services, so had been trying to use Wireshark running on the host to debug.

I'm using on-board LAN: Realtek PCI-E Gigabit
The VM LAN is bridged to the host adapter
Wireshark is running in promiscuous mode

Despite this, wireshark fails to detect incoming packets from the LAN destined for the VM. It does detect out going packets correctly. The packets do get to the virtual machine - so it's not a delivery a problem.

I'm a bit baffled about how to fix this - as I've fiddled with a number of settings and nothing causes the missing packets to be captured by wireshark. Any ideas as to how to get wireshark to capture incoming packets?

 

[RadiclDreamer]

Wireshark will capture all packets provided they are going through the interface you have selected and you dont have any capture filters.

 

[mcmilljb]

I think I found the answer in the virtualbox manual.

Bridged networking

This is for more advanced networking needs such as network
simulations and running servers in a guest. When enabled, VirtualBox connects
to one of your installed network cards and exchanges network packets directly,
circumventing your host operating system’s network stack.

That could explain why wireshark cannot see packets since you have it running on the host computer.

 

[Emulex]

esxi supports promiscuous mode; its mostly windows based products(hyper-v,etc) that can not do promisc mode - which is a major lameness