Comments (5)
hello, that is not how physical routing works. cape can't control routing of physical machines, so you need to handle that on your switch/router
from capev2.
Thanks for responding. Im confused my understanding of Cape router is that it routes traffic from the dirty line to the interface going to the guest machine temporarily. Both devices can seen each other fine. The analysis and re-imaging with FOG both work fine. Why do you think its a physical routing issue?
Below is a diagram of my lab network.
from capev2.
yes it does but for the VMs that are on CAPE server, not for the physical host. Physical hosts network is managed by router/managed switch, we can't hack
each router and forward traffic, that is your task to set some firewall that will route all traffic from that machine to specific exit node, but if that just internet than it should works out of the box with basic windows configuration. So if you configured your fog client with internet, it will have internet, but we can't do nothing there
from capev2.
I think I figured out a solution and wanted to post it here for other people. My CAPE guest machine only has one NIC going to the managed switch back to the CAPE host. I can add another NIC to the CAPE guest and using VLANs on the switch connect to the 4g router in an isolated manner. On my switch I can enable port mirroring and send that back to the CAPE host with an additional NIC on the CAPE host for this. In the Auxiliary conf I can tell tcpdump to monitor that NIC and see the network traffic from the guest host.
from capev2.
thanks for details, and glad that you solved it
from capev2.
Related Issues (20)
- Suricata warning message is output to process.log HOT 3
- [SOLVED] Error run command "poetry run python3 manage.py migrate" HOT 7
- [SOLVED] Analysis does not work HOT 18
- Unable to install CAPE with Poetry HOT 4
- cape2.sh error HOT 3
- Expected query cape2.sh installation HOT 1
- sudo: ./kvm-qemu.sh: command not found HOT 2
- No file/folder found for package cap ev2 HOT 2
- Can't use the aws machinery due to KeyError: 'arch' in ./lib/cuckoo/common/abstracts.py HOT 10
- Couldn't connect to vSphere host HOT 2
- Deprecation of cgi python module does not allow windows-less mode HOT 1
- Autoscaling Windows EC2 does not launch agent HOT 5
- AWS non-autoscale single EC2 guest still relies on an AMI while snapshot is available. HOT 1
- Analysis machine doesn't automatically shutdown if analyzed program exits with non-zero code HOT 1
- Analysis timeout HOT 10
- Processing Failed HOT 13
- about apt to apt-get in installation scripts HOT 5
- Can't enable web interface, django not found HOT 3
- Since migrating to wsgi / gunicorn, I lost the webapi, it results in 404 errors. HOT 10
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from capev2.