jetlib.sec » BackTrack Linux Forums » IP binding-loss, buggy Wireshark, virtual machine networking

Feeds

132763 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

BackTrack Linux Forums

• October 12, 2011
• 

  IP binding-loss, buggy Wireshark, virtual machine networking

  Posted: October 12th, 2011, 5:25am PDT by chaosbuddha

  Tags:   

  Hi There!
  
  I'm running BT 5 rc1 (64-bit) KDE on my machine. My ethernet card reads Atheros AR8132 PCI-E Fast Ethernet Controller (NDIS 6.20) and I use Virtualbox (virtualbox-4.1_4.1.2-73507~Ubuntu~lucid_amd64) to run my virtual test-machines.
  And I'm running into the following problems:
  
  I usually have static IP for my ethernet card. The problem is that the IP and gateway bindings keep getting re-initialized after every 2-3 minutes. Which means that I need to keep doing (ifconfig IP/MASK; route add default gw GW_IP) after every few minutes. Somehow the resolv.conf remains untouched..
  Somebody help me...
  
  
  Buggy Wireshark: Typing "wireshark" onto bash says
  "wireshark: error while loading shared libraries: libwsutil.so.0: cannot open shared object file: No such file or directory".
  Doing "whereis wireshark" gives
  wireshark: /usr/local/bin/wireshark /usr/local/lib/wireshark
  Which means that wireshark seems to be installed but not running..
  
  
  
  I normally have the following adapter-settings for my virtual-box machines:
  Adapter 1:
  PCnet-FAST III or Intel PRO/1000 MT Desktop (NAT)
  
  Adapter 2:
  PCnet-FAST III or Intel PRO/1000 MT Desktop (Bridged adapter, eth0)
  
  Adapter 4:
  PCnet-FAST III or Intel PRO/1000 MT Desktop (Host-only adapter, 'vboxnet0')
  
  I'm not able to sniff "outgoing" packets from the machines using wireshark on any of these interfaces. For instance if I open the index page of a test-website running on one of the machines from another machine (or from the host itself), I can see all the incoming handshake and subsequent data packets but none of the outgoing request packets.. The packets seem to be getting "trasferred internally" through some kind of software-interface than actually being sent out from the interface. I'm clueless about how do I get around this issue.
  
  
  
  I also need to assign separate IPs to each one of the interfaces and set up a mini-net so that services available on one IP / interface are accessible from another IP / interface on another machine. Could anybody kindly help me go about it?
  
  
  
  I downloaded holynix and I need to run it as a pre-built machine (contains following files: holynix2.nvram, holynix2.vmdk, holynix2.vmsd, holynix2.vmx, holynix2.vmxf) on Virtualbox. Now Virtualbox isn't recognizing the files as a separate machine - how do I get around it?