Getting Data In

Host-Only Guest to Host-only Guest Forwarding not working?

wuming79
Path Finder

Hi,

Is it possible to forward data from a vmnet1 Host-Only VM Guest to another vmnet1 Host-Only VM Guest? I actually set up this way and list forward-server does see the ip:port active but my other Guest collector could not see any data coming in.

After I switch to vmnet8 nat on both machines, I can see my data coming in but I need to block my data source from the internet. How do I do it without vmnet Host-Only or Host-only network configuration??

0 Karma

wuming79
Path Finder

I made a mistake. I thought I was communicating from guest to guest but actually I was doing intermediate forwarding to another host via natnetwork out and thus I was actually viewing my 2nd guest instead of the original....

rich7177: any idea how I can make guest1 forward data to guest2 while blocking internet connection on guest1? I'm actually trying to do malware analysis on guest1 but I want to protect the network and my host.

0 Karma

wuming79
Path Finder

Not sure why, but I just found out if I use host-only without vmnet1 (host-only) I was able to forward data.

0 Karma

Richfez
SplunkTrust
SplunkTrust

I almost never use host-only networks, because I need my guests to talk to relatively random things. But my understanding is that host-only networks only allow communication with the host itself.

The other VM guest isn't the host (even though it lives ON the host), it's another guest and as such the communication won't be allowed between them.

I think you answered your own question, so If I were you I'd accept that. It's OK to do so occasionally if it's the best answer for a question.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

    Are you ready to transform how your team handles complex data requests? We invite you to our upcoming ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...