Well, I'm sure a majority of you have played with VMWare, and I'm looking for a little advice here. I am doing a bunch of research on my box involving a linux image and a windows 2k3 image, and I really want a third image to act as my IDS box. The only way I have been able to figure out how to do this is to load snort on my hosting machine and set the sniffing interface to my vmnet "device", which I really didn't want to do. I wanted to keep everything for my "lab" in vmware.

Does anyone know how to "SPAN" your vmnet to a particular VMWare client?

Cheers
-Jib

[No sooner does man discover intelligence than he tries to involve it in his own stupidity.]
[Jaques Cousteau]



Edited 1 time(s). Last edit at 04/05/2007 07:39PM by Jib.

I haven't played with the networking aspect of VMware much, but you could always (get ready for it) load VMware inside VMware. Ouch, I know, I'm sorry for even having mentioned it.

- RSnake
Gotta love it. http://ha.ckers.org

I tried installing vmware on a VMed XP installation once, didn't install complaining that it was already a VM.

You can create a virtual network (if you have VMware workstation), this would allow you to place a node between two others so it can manage traffic.

Don't forget our IRC: irc://irc.irchighway.net/#slackers
-WhiteAcid - your friendly, very lazy, web developer

rsnake Wrote:
-------------------------------------------------------
> I haven't played with the networking aspect of
> VMware much, but you could always (get ready for
> it) load VMware inside VMware. Ouch, I know, I'm
> sorry for even having mentioned it.


While an interesting thought that didn't even occur to me, I think my system isn't up to handling the task. But, Thanks!!

[No sooner does man discover intelligence than he tries to involve it in his own stupidity.]
[Jaques Cousteau]

WhiteAcid Wrote:
-------------------------------------------------------
> I tried installing vmware on a VMed XP
> installation once, didn't install complaining that
> it was already a VM.
>
> You can create a virtual network (if you have
> VMware workstation), this would allow you to place
> a node between two others so it can manage
> traffic.


Hmm... I'll have to look into this VM Workstation. Thank you, Acid.

If anyone else has any ideas, I'd love to hear them as well!

[No sooner does man discover intelligence than he tries to involve it in his own stupidity.]
[Jaques Cousteau]

VMWare inside VMWare?!
Oh my god. I can see forever!

- Kyran