Initial configuration of WireShark deep packet forensics tool within the Oracle Virtual Box. Configuration of Oracle VM Manager as a co-existent network stimulator in VB. Dave Sweigert, CISSP, CISA, PMP

1. •
•
Virtual Machine test environment
to monitor network traffic
Dave Sweigert, CISSP, CISA, PMP
10/13/2013
1

2. Oracle VM
Manager
PALADIN
WireShark
Oracle Virtual Box - GUEST
Windows 7 64-bit HOST
System Under Test (SUT)
10/13/2013
2

3. This graphic
demonstrates the issues
related to defining the
network interface in the
GUEST virtual machine.
By default ORACLE Virtual
Box configures an
interface to 192.168.56.1
10/13/2013
3

4. This graphic
demonstrates the
functions used to define
networking interfaces
within Oracle Virtual
Box.
10/13/2013
4

5. This graphic
demonstrates the
functions used to
define networking
interfaces within
Oracle Virtual Box.
10/13/2013
5

6. This graphic demonstrates the
use of the IPCONFIG command
within the Windows 7 HOST to
verify network interfaces.
10/13/2013
6

7. This graphic demonstrates the potential
Conflicts with the VMCI utility (which can
become a conflict when two or more
applications attempt to access the same
network interface).
10/13/2013
7

8. This graphic demonstrates the operation of Oracles VM
Manager, acting as a network service in the GUEST VM.
10/13/2013
8

9. This graphic demonstrates the operation of Oracles VM
Manager, acting as a network service in the GUEST VM.
10/13/2013
9

10. This graphic demonstrates the operation of Oracles VM
Manager, acting as a network service in the GUEST VM.
10/13/2013
10

11. This graphic demonstrates WireShark
operating from the GUEST PALADIN forensic
tool set in a Virtual Machine.
10/13/2013
11