# Capturing Traffic in Virtual Networking Labs

DevFeed: [Capturing Traffic in Virtual Networking Labs](<https://devfeed.tech/articles/capturing-traffic-in-virtual-networking-labs-11160.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/03/virtual-labs-traffic-capture/>)

Published: 2025-03-04T06:43:00Z

Content type: tutorial

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [networking](<https://devfeed.tech/topics/networking.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [qemu](<https://devfeed.tech/topics/qemu.md>), [virtual machines](<https://devfeed.tech/topics/virtual-machines.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Docker](<https://devfeed.tech/topics/docker.md>)

Tags: [capture](<https://devfeed.tech/tags/capture.md>), [container](<https://devfeed.tech/tags/container.md>), [containers](<https://devfeed.tech/tags/containers.md>), [docker](<https://devfeed.tech/tags/docker.md>), [lan](<https://devfeed.tech/tags/lan.md>), [linux](<https://devfeed.tech/tags/linux.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [networking](<https://devfeed.tech/tags/networking.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [virtual-machines](<https://devfeed.tech/tags/virtual-machines.md>), [virtualization](<https://devfeed.tech/tags/virtualization.md>)

## AI overview

A tutorial on capturing traffic in virtual networking labs. It explains how to capture traffic from Linux bridges and QEMU-connected virtual machines, use netlab capture as a wrapper around virsh, brctl, and tcpdump, and approach traffic capture for containers attached to Docker networks or Linux bridges.

## Source excerpt

When I announced the Stub Networks in Virtual Labs blog post on LinkedIn, I claimed it was the last chapter in the "links in virtual labs" saga. I was wrong; here comes the fourth part of the virtual links trilogy - capturing "on the wire" traffic in virtual networking labs. While network devices provide traffic capture capabilities (usually tcpdump in disguise generating a .pcap file), it's often better to capture the traffic outside of the device to see what the root cause of the problems you're experiencing might be. Read more ...