Figure 1
This document will guide you to install WFilter in a vmware workstation virtual machine for pass-by monitoring and filtering.
The "network connection" of virtual machine shall be "bridged".
In VMWare Workstation, the network adapter shall be configured as "Bridged" to get traffic on the physical adapter.
Connect the host adapter to a mirroring port in your switch or router, then WFilter shall be able to monitor other devices in network.