So I spent a few minutes today to figure out just WHY this is happening. Turns out my original assumption of Fusion not building "valid" interfaces is partly correct. The "vmnet[x]" interfaces can not be opened with BPF! I wrote a quick program to check it out:
macpro:~ grutz$ sudo ./testbpf vmnet8ktrace validates:
ERROR: Device not configured
2721 testbpf CALL ioctl(0x83,0x8020426c ,0xbffffb28)So VMWare isn't creating valid interfaces. No tcpdump for you (and no nmap)! The solutions so far have been to shutdown the interfaces but what if you need to keep Fusion up and running?
2721 testbpf RET ioctl -1 errno 6 Device not configured
Here's a quick and dirty patch applied to tcpip.cc that will skip over the vmnet interfaces. Until Fusion fixes their set up this is the only way it'll work.
/* skip broken VMWare Fusion vmnet interfaces */Sigh.
if (strncmp(ifr->ifr_name, "vmnet", 5) == 0)