Vista - VS 2005 R2: Promiscuous mode ethernet on for VM running Wireshark?

All,

QUESTION: Is it possible for a VM to promiscuously listen to *all* packets
coming in on a physical NIC on the VS 2005 R2 host, where the VM has a
dedicated connection to that NIC?

Searches for "promiscuous" and "wireshark" returned no results...
Searching other forums, it appears that modifying the
"allow_promiscuous_mode" parameter in a VM's .vmc file will *only* set a
Virtual Network switch (which has multiple VM's attached) to promiscuous
mode, allowing VM's to see each other's traffic on the shared virtual switch.

But in the case where a VM has a dedicated "bridged" connection to a
physical NIC on the MSVS host, we have the need (for a networking class) to
run Wireshark on the VM to monitor *all* packets that are presented to the
physical NIC on the MSVS host - the NIC is connected to an external switch
that has been set up to "mirror" all packets from another port. The port
counters indicate that all the packets *are* being sent out the attached port
on teh switch - but Wireshark on the VM (Windows XP Pro) only sees packets
that are either multicast/broadcast, or are unicast to the VM's Unicast MAC
address.

It appears this is not possible, or is a limitation of VS 2005 R2 -
but I'm hoping for a definitive answer.... Fwiw, this *does* work on ESX 3.5..

Many thanks, best regards,

-Chuck O.

On Wed, 29 Jul 2009 06:23:01 -0700, chucko
<chucko@newsgroup> wrote:
Nope, a VM won't see the host's network traffic. Data is routed
before it gets to the VM's virtual NIC.
For details, see Ben's blog:
http://blogs.msdn.com/virtual_pc_guy...27/774228.aspx

--
Cheers,
Steve Jain, Virtual Machine MVP
http://vpc.essjae.com/