I need to to capture RTMP traffic between two virtual machines (server and client) or atleast have the server and client on the same machine and capture the traffic. I am able to capture the traffic if I run wireshark on the host rather than on the VMs. But I need to capture it on the VM to be able to manipulate it.
So what happens when you run Wireshark on the VMs? I would turn off promiscious mode, which will only monitor traffic being transmitted or received on that specific VM, instead of listening to all network traffic on the wire. Also I would make sure you are selecting the correct network interface from the drop down menu if there are multiple interfaces, before I start the capture mode. What exactly are you seeing on the server and client VMs when you run Wireshark?