Trying to get wireshark to work in Proxmox VM

[crc540]

I am trying to get wireshark to work in my Proxmox VM. I tried to do a pcie pass-through but that caused by proxmox server to not boot correctly. I had to do a recovery and edit the grub and vm config file. I have two broadcom nics on the server and I was going to dedicate on nic just for wireshark and it has vt-x. Is there a simple or another way to get wan traffic on the vm. I installed tshark on the Proxmox server it self and I do see all the traffic from the wan. Just need to see that to the vm. Thanks You so much for any help/guidance.

 

[Richard]

I am trying to get wireshark to work in my Proxmox VM. I tried to do a pcie pass-through but that caused by proxmox server to not boot correctly. I had to do a recovery and edit the grub and vm config file. I have two broadcom nics on the server and I was going to dedicate on nic just for wireshark and it has vt-x. Is there a simple or another way to get wan traffic on the vm. I installed tshark on the Proxmox server it self and I do see all the traffic from the wan. Just need to see that to the vm. Thanks You so much for any help/guidance.

If you want to see the the traffic to/from a certain VM specify the virtual nic where the VM is connected to as interface, e.g.

tshark -i tap100i0

 

[crc540]

I am setting up security onion in one of my vms and I can see traffic from the hyper visior server that is hosting proxmox but not from the vm that is hosting security onion

 

[klotzma]

How do I apply the command?

tshark -i tap100i0

How do I enter the virtual network card in this command?

Example: vmbr0