ETHERNET CONNECTIONS

[maczen]

I have a quick question. If I run an ipconfig in Windows I show three ethernet adapter LAN connections...

192.168.1.2 is my wireless connection.. Got that!

But I have two more in different 192.168.x.x subnets... I am assuming that these belong to the Sun VirtualBox that I am using to run OpenSolaris and nUbuntu but am not sure how to test this! I know that when I run VMWare I tend to have some of these type connections but at least the Connection-Specific DNS Suffix will say as much! Is there a way to check this?

Finally, when using a guest OS like nUbuntu my IP address is 10.x.x.x.. (Inside the VirtualBox) I can only assume that there is some form of NAT occurring between the host and guest OS's.. This should not negatively impact Ethereal traces and the like should it? Does anyone know if it is possible to simply forward/bridge the Windows interface to my guest because I have to believe that this NAT'ing will include some additional junk in my traces... LoL Will test soon but spent several hours getting everything up and running.. Wanted BackTrack 3 (Another security focused *nix distro) but the server was on a dialup speed LoL

nUbuntu is pretty cool guys.. if you want a new toy with lots of .. well.. toys.. LoL Most of the really good network/security/pen testing tools are there including NMAP/Wireshark/Ettercap/Metasploit et al... Was missing CryptCat/HPing3 and a few others that would have been nice to have.. Oh and Yersinia is included.. It's sweet! Going to plug in tomorrow and play with it on the equipment! My only gripe is that they included MailSnarf (very quick way to get locked up if you don't know how to use it LOCALLY ONLY)!

Anyway, thanks in advance guys.. Just looking for self-audit info.. Later!

B Haines
CCNA R&S, ETA FOI

 

[lerdalt]

I would have to guess there is a way to check the interface stuff, but I don't have VirtualBox loaded on my laptop at work. I can check it out when I get home to my desktop.

As far as the Ethereal traces, it shouldn't impact anything, but I do prefer to run bridging when I can between my VMware machines and my host OS for any traces.

I'll see what I can find out tonight unless someone can answer it for you.

 

[maczen]

Thanks Dalt!

B Haines
CCNA R&S, ETA FOI

 

[burtsbees]

Post what you see, ipconfig /all
In Ubuntu, what do you see on ifconfig -a
Also, in Windows, look at the network connections in the Control Panel---it should have names that will clue you in as to what they are...

You're starting to complicate things, Billy...better nip THAT in the BUD!

Burt

 

[maczen]

LoL.. Will do Burt!

OK.. The two network connections in question belong to VMWare.. For some reason the Sun VBox stuff was not displayed in an ipconfig.. I am going to provide both the Windows and guest nUbuntu configs! (I need another 2 gigs of RAM then I can run 4 OS's every time I am on here!! LoL)

BRB

B Haines
CCNA R&S, ETA FOI

 

[maczen]

Here is the Windows ipconfig /all.. Will post Nix from that side since I don't have guestadditions installed (don't think it works with trimmed version of Ubuntu)!


Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\maczen>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : maczen-Mobile
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : SomeBox-WLAN

Ethernet adapter HostInt:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VirtualBox TAP Adapter
Physical Address. . . . . . . . . : 00-FF-A6-B6-68-1E
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : x.x.x.x(Preferred)
Autoconfiguration IPv4 Address. . : x.x.x.x(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : x.x.x.x
x.x.x.x
x.x.x.x
NetBIOS over Tcpip. . . . . . . . : Enabled

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : SomeBox-WLAN
Description . . . . . . . . . . . : Dell Wireless 1490 Dual Band WLAN Mini-Ca
rd
Physical Address. . . . . . . . . : 00-1F-3A-12-E8-8A
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : x::x:x:x:x%x(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, November 11, 2008 4:29:48 PM
Lease Expires . . . . . . . . . . : Friday, November 14, 2008 4:29:48 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : x.x.x.x
x.x.x.x
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8040 PCI-E Fast Ethernet
Controller
Physical Address. . . . . . . . . : 00-1D-09-36-48-FB
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
1
Physical Address. . . . . . . . . : 00-50-56-C0-00-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::9cb3:af16:bf6b:b1eb%19(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.222.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : x.x.x.x
x.x.x.x
x.x.x.x
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
8
Physical Address. . . . . . . . . : 00-50-56-C0-00-08
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::adb8:70d6:793e:f3a3%21(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.43.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : x.x.x.x
x.x.x.x
x.x.x.x
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 6:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 14:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{1AEC0D07-EDF5-4796-A110-74D439DA7
1FA}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 15:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{2E5D3EA2-04D6-4D4A-9A66-ED8B997C4
CD4}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 18:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : SomeBox-WLAN
Description . . . . . . . . . . . : isatap.SomeBox-WLAN
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 19:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{7B3D0A07-16B0-4C96-AAE8-E04E0082D
1F0}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 21:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.xxxx
091}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

C:\Users\maczen>

B Haines
CCNA R&S, ETA FOI

 

[maczen]

Here is the Linux ifconfig -a

eth0 Link encap:Ethernet HWaddr 08:00:27:ec:23:a3
inet addr:10.0.2.15 Bcast:10.0.2.255 Mask:255.255.255.0
inet6 addr: x.x.x.x/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:33 errors:0 dropped:0 overruns:0 frame:0
TX packets:59 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:5712 (5.7 KB) TX bytes:8268 (8.2 KB)
Interrupt:11 Base address:0xc020

eth1 Link encap:Ethernet HWaddr 08:00:27:87:7b:7c
inet6 addr: x.x.x.x/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7 errors:0 dropped:0 overruns:0 frame:0
TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1548 (1.5 KB) TX bytes:1836 (1.8 KB)
Interrupt:10 Base address:0xc060

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:184 (184.0 B) TX bytes:184 (184.0 B)

pan0 Link encap:Ethernet HWaddr 62:b7:d5:e2:80:da
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)


B Haines
CCNA R&S, ETA FOI

 

[maczen]

See the 10.x.x.x on the Linux side but 192.168.x.x on the host Windows side??? Has to be NAT'ing between right? Will this cause me issues with captures etc?

B Haines
CCNA R&S, ETA FOI

 

[maczen]

It doesn't seem to interfere with captures.. I just turned wireshark on and hopped onto the nUbuntu site... Short capture but the funny thing is..

I (10.x.x.x) query DNS server (10.x.x.x) which I am thinking is an address used by the Virtualbox program because it is not even in the subnet of my router (which leads to the DNS server)..

After the DNS resolution of the website there was some handshaking between my guest 10.x.x.x and the actual nUbuntu site... No 10.x.x.x to 192.168.x.x or anything like that.. So now I am confused.. LoL How can this be? My laptop connects wirelessly via a 192.168.1.1 to 192.168.1.2 (router).. I use eth0 on my guest OS and have a 10.x.x.x ip addy... But wireshark works as if the guest is the actual OS!!!

By the way, did you guys notice that eth0 is an IPv4 address and eth1 is an IPv6! I have two interfaces setup on the guest but that is strange too!

B Haines
CCNA R&S, ETA FOI

 

[lerdalt]

Looks like you have everything answered....but under the settings for Virtual box, you can turn on different options for how the card works. NAT, Not Attached, Host interface or Internal network.

Actually your eth1 and your eth0 have the same IPv6 address of all "x"'s. i.e....not using it.

 

[maczen]

Dalt,
Silly question.. what is the difference between host interface and internal network? Just looked and mine is indeed NAT'd!!! Still don't know why I don't see the 192.168.x.x interface if it goes from 10. to 192. to internet but whatever.. LoL

B Haines
CCNA R&S, ETA FOI

 

[lerdalt]

ya know..I don't have a clue. I've only gotten far enough with Virtual box to setup 1 machine and that's been it. Haven't fired it up since I built the machine.

 

[maczen]

LoL.. I know what ya mean! I just started using it again! There is a memory leak with Solaris and OpenSolaris with VirtualBox.. I read on it and even applied the Microsoft HotFix but it's still there! It gradually slows to a standstill! No such issues with nUbuntu! Hoping that OpenSolaris 2008.11 doesn't have the issues that 2008.05 had in this regard!

Have you guys had a chance to play with FreeNAS or even better OpenFiler? Have to hop back over to the VMWare side of the house if you want to virtualize but OF looks awesome! Thinking of running Windows Server 2008 on the PowerEdge 6650 with a VM OpenFiler.. I have two interfaces so everything should be able to point everything in the right direction.. OF supports CIFs so my Windows machines should be able to save/access everything then I can run mySQL and have another toy! May crawl and index this site so that it can be more easily searched! That would be a useful tool.. there is a ton of good info here if you can just find it! Usually have to use google w/ operators to locate what I am hunting! Anyway.. Thanks guys.. I definitely appreciate it!

B Haines
CCNA R&S, ETA FOI

 

[lerdalt]

I was running FreeNAS for awhile. Had it under a VMserver, but allowed it to directly access my disk. That way I the server could crash, but I could still get the data. Somewhere had a bug, not sure if it was hardware or what, but my disk got corrupted and ended up losing lots of data/applications. Nothing too important, but still enough to piss ya off.

 

[maczen]

I know what ya mean.. FreeNAS is stupid in regard to setup.. You can run it from a thumbdrive but can't run it on the same disk that you are storing to. Apparently if you do then you are just asking for trouble.. Also it seems to have very limited authorizations.. If someone is authenticated then they are authorized for everything.. no limits.. I am leaning more toward OpenFiler!

B Haines
CCNA R&S, ETA FOI

 

[burtsbees]

...but can't run it on the same disk that you are storing to."
First off, never end a sentence with a preposition.
Second...
Can you ignore the interlock, like in OpenVMS? Sounds like a mount problem...what a poor design!

Burt

 

[lerdalt]

Actually with FreeNAS, I was didn't want to run it on the same disk I was storing too. Didn't care about that. I think my problem was more in the USB controller I had and going to an external usb drive. I let the VM have direct access to the disk, and had it mounted as an NTFS partition. I'm sure I added issues to my setup, but when the thing started to fail, I freaked out. I could literally watch files vanish.

The security piece was disappointing too, but it wasn't for the power users.

 

[maczen]

My apologies Professor Buirt...

I understand Dalt,
I was considering FreeNAS for simplicity and the ability to play with a NAS and SAN on my network but you have definitely pushed the balance of the decision to go OpenFiler over the edge! LoL

Guess they should have named FreeNAS.. MagicNAS.. In regard to files.. Now you see them.. Now you don't!

B Haines
CCNA R&S, ETA FOI

 

[lerdalt]

yeah..I was really afraid I was going to have to explain to the wife that I lost all of our wedding pictures. Fortuneately that was the one thing I had backed up to a dvd. Of course I spent hours trying to recover anything I could...which was nothing. I still don't blame FreeNAS, I blame the cheap USB controller I had bought.

 

[maczen]

Mybe, but it is like the fail-opn/fail-closed status of other networking equipment.. You would think that the designers would include a default to NOT delete ec=verything.. LoL

B Haines
CCNA R&S, ETA FOI