VMWare ESXi 5.1: setup port mirroring for vm

Hi,

I'd need to capture traffic from a vmware machine on ESXi 5.1 which has no full os loaded (winpe), therefore I'd like to setup another machine with windows and run netmon on it.

Please advise howto do this.

J.
janhoedtAsked:
Who is Participating?
 
AbhilashBloggerCommented:
Follow the below Official KB Articles which tell you what steps to be taken care of to sniff traffic from other vM's
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1000880
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1038847

You will get a lot of software which can be used to do the sniffing.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
We would normally start by using Winshark connected to the same vSwitch as VM you need to monitor and then set the port group and switch for promiscuous mode.

All traffic on vSwitch can then be sniffed then using a MAC address filter you should be able to capture traffic to your VM.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.