I’ve been capturing some network data using a computer with Hyper-V installed this evening and it’s worth noting that I needed to sniff a physical network connection to get anything meaningful. Thinking about it, that makes sense (Hyper-V implements a virtual switch – not a hub – so the traffic on each vNIC is isolated until it reaches a pNIC) but it may be something worth remembering.