Getting Data In

Host-Only Guest to Host-only Guest Forwarding not working?

wuming79
Path Finder

Hi,

Is it possible to forward data from a vmnet1 Host-Only VM Guest to another vmnet1 Host-Only VM Guest? I actually set up this way and list forward-server does see the ip:port active but my other Guest collector could not see any data coming in.

After I switch to vmnet8 nat on both machines, I can see my data coming in but I need to block my data source from the internet. How do I do it without vmnet Host-Only or Host-only network configuration??

0 Karma

wuming79
Path Finder

I made a mistake. I thought I was communicating from guest to guest but actually I was doing intermediate forwarding to another host via natnetwork out and thus I was actually viewing my 2nd guest instead of the original....

rich7177: any idea how I can make guest1 forward data to guest2 while blocking internet connection on guest1? I'm actually trying to do malware analysis on guest1 but I want to protect the network and my host.

0 Karma

wuming79
Path Finder

Not sure why, but I just found out if I use host-only without vmnet1 (host-only) I was able to forward data.

0 Karma

Richfez
SplunkTrust
SplunkTrust

I almost never use host-only networks, because I need my guests to talk to relatively random things. But my understanding is that host-only networks only allow communication with the host itself.

The other VM guest isn't the host (even though it lives ON the host), it's another guest and as such the communication won't be allowed between them.

I think you answered your own question, so If I were you I'd accept that. It's OK to do so occasionally if it's the best answer for a question.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...