ESXi 5.1 VM Guest Network Traffic

compdigit44
compdigit44 used Ask the Experts™
on
I know you can use tcpdump to capture management traffic but is there a way to monitor physical nics assigned to VM guest traffic besides setting up a vDS with promiscuous moide
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solution Only
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017

Commented:
You could try Wireshark, and port mirroring.
compdigit44

Author

Commented:
Why can't tcpdump be used to capture this information
VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017
Commented:
You want to capture specific traffic for a VM only ?

not all of the traffic flowing out of the port ?

by default it will not capture traffic across the vSwitch.

see here

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1031186

you will need to use Wireshark in a VM, or

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1004099
compdigit44

Author

Commented:
Interesting so it only targets vmkernel port groups good to know and I learned something once again... :o)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial