Month: March 2016

Windows on VirtualBox on CentOs using RDP

hytgbn
  • Installing kernel-devel was recommended by several pages, so I just did it.

sudo yum install kernel-devel

Install VirtualBox and extension pack

  • Get repo
    cd /etc/yum.repos.d
    sudo wget http://download.virtualbox.org/virtualbox/rpm/rhel/virtualbox.repo
  • You can change enabled when you don't need this repo.

  • Install VirtualBox and extension pack.
    sudo yum install VirtualBox-5.0
    wget http://download.virtualbox.org/virtualbox/$(vboxmanage -v | cut -d'r' -f 1)/Oracle_VM_VirtualBox_Extension_Pack-$(vboxmanage -v | cut -d'r' -f 1)-$(vboxmanage -v | cut -d'r' -f 2).vbox-extpack
    sudo vboxmanage extpack install ./Oracle_VM_VirtualBox_Extension_Pack-$(vboxmanage -v | cut -d'r' -f 1)-$(vboxmanage -v | cut -d'r' -f 2).vbox-extpack

Create VM

  • If you have an ova file import it into VirtualBox

vboxmanage import OVA_FILE_PATH

  • If you have an iso file
    • To get ostypes: vboxmanage list ostypes | grep -i window | grep ID
    • Assume you have VMNAME variable, such as export VMNAME=win10
    • Create VM vboxmanage createvm --name $VMNAME --ostype Windows10_64 --register
    • vboxmanage modifyvm $VMNAME --memory 1024 --acpi on --boot1 dvd --nic1 nat
    • Create HDD vboxmanage createhd --filename '$VMNAME.vdi' --size 10240
    • Add IDE controller vboxmanage storagectl $VMNAME --name 'ide ctrl' --add ide --controller PIIX4
    • Attach HDD vboxmanage storageattach $VMNAME --storagectl 'ide ctrl' --port 0 --device 0 --type hdd --medium ./$VMNAME.vdi
    • Attach ISO file as DVD driver vboxmanage storageattach win10 --storagectl 'ide ctrl' --port 0 --device 1 --type dvddrive --medium PATH_TO_ISO_FILE

Set VRDE mode

vboxmanage modifyvm $VMNAME --vrde on

Start VM

vboxmanage startvm --type headless $VMNAME

Check if RDP is listening on 3389 port

netstat -ntl | grep 3389

Run Client to get screen.

  • I downloaded Parallels Client from App Store for my osx, which works perfectly.

References

  • https://www.virtualbox.org/manual/ch07.html
  • https://www.virtualbox.org/manual/ch08.html
  • https://www.virtualbox.org/wiki/Linux_Downloads
  • http://betanews.com/2015/07/29/how-to-download-windows-10-and-create-your-own-installation-usb-flash-drive-or-dvd/
  • https://www.microsoft.com/en-us/software-download/windows10ISO
  • https://forums.virtualbox.org/viewtopic.php?f=7&t=44337
  • https://dev.windows.com/en-us/microsoft-edge/tools/vms/linux/

Tcpdump

hytgbn

Remember to turn off TSO GSO

Before start capturing your packets to troubleshoot, remember to turn off tso and gso. Segment offloading is to let your NIC deal with packet processing, such as packet fragmentation and retransmission. This generally is good but hides your real packet transmission. In linux, you can disable this features by executing below commands.
ethtool -K tso off gso off

Capture TCP packet to a host:port

tcpdump -i -s 0 -vv -nn "tcp and host 1.2.3.4 and 443 "

  • -s 0: do not truncate packets

Capture TCP packet of a subnet

tcpdump -i -s 0 -vv -nn "tcp and net 192.168.0.0/16"

Capture UDP packet of specific bytes

tcpdump -i -s 0 -vv -nn "udp[10:4] = 0x01020304"

Filter out a tcpdump file to another file

tcpdump -r-w "tcp and port 8080"