Getting Data In

Host-Only Guest to Host-only Guest Forwarding not working?

wuming79
Path Finder

Hi,

Is it possible to forward data from a vmnet1 Host-Only VM Guest to another vmnet1 Host-Only VM Guest? I actually set up this way and list forward-server does see the ip:port active but my other Guest collector could not see any data coming in.

After I switch to vmnet8 nat on both machines, I can see my data coming in but I need to block my data source from the internet. How do I do it without vmnet Host-Only or Host-only network configuration??

0 Karma

wuming79
Path Finder

I made a mistake. I thought I was communicating from guest to guest but actually I was doing intermediate forwarding to another host via natnetwork out and thus I was actually viewing my 2nd guest instead of the original....

rich7177: any idea how I can make guest1 forward data to guest2 while blocking internet connection on guest1? I'm actually trying to do malware analysis on guest1 but I want to protect the network and my host.

0 Karma

wuming79
Path Finder

Not sure why, but I just found out if I use host-only without vmnet1 (host-only) I was able to forward data.

0 Karma

Richfez
SplunkTrust
SplunkTrust

I almost never use host-only networks, because I need my guests to talk to relatively random things. But my understanding is that host-only networks only allow communication with the host itself.

The other VM guest isn't the host (even though it lives ON the host), it's another guest and as such the communication won't be allowed between them.

I think you answered your own question, so If I were you I'd accept that. It's OK to do so occasionally if it's the best answer for a question.

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...