Ethereal, VMware, and duplicate packets

Christopher R. Hertel crh at
Sat Jun 26 23:43:57 GMT 2004

On Sat, Jun 26, 2004 at 07:03:28PM -0400, Derrell.Lipman at wrote:
> "Christopher R. Hertel" <crh at> writes:
> > There's this age-old problem when running vmware and Ethereal on the same 
> > box.  When sniffing the eth0 interface on my Linux 'host' system, the 
> > packets sent by the vmware 'guest' system appear twice in the capture.
> >
> > What's the work-around for this?
> You can try setting the vmware guest network adapter to "host only" (giving it
> its own network interface and IP address range) and then assign routes on the
> Linux (native) side to and from the host-only address range.  This will, of
> course, affect how other computers see your vmware guest and vice versa --
> i.e. not at all, for a Windows vmware guest and B mode) but if you can live
> with that limitation, this just might solve your problem.

It's an interesting solution, but I kind of like having the virtual 
machines on the same LAN.  That way I get to see all of the LAN traffic.

The other solution I've come across is to run the capture (using tcpdump,
etc.) on a third box.


Chris -)-----

"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team --     -)-----   Christopher R. Hertel
jCIFS Team --   -)-----   ubiqx development, uninq.
ubiqx Team --     -)-----   crh at
OnLineBook --    -)-----   crh at

More information about the samba-technical mailing list