Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


TAPs in virtualization

Posted on 2017-09-13
Low Priority
Last Modified: 2017-09-15
I am investigating the use of TAPs in virtualization for capturing data from VMs.

I am interested in two methods.

Virtual Taps within the VMware using Network vSwitch (standard and distributed)
Physical TAP that would be connected to the ESXi Host or switch or both.

First, for virtual taps.

On a standard vSwitch on one ESXi host, I think that promiscuous mode will need to be set on a port group?  If I have a VM on vSwitch2 that is connected to ESXi nic2 and a VM on vSwitch3 connected to ESXi nic3, what is process to capture data from the VMs?

Distributed Switch,
If the Distributed Switch called d_vSwitch1 is set up for two ESXi Servers, ESXi-1 and ESXi-2, and VMs are on a Distributed Port Group called Data-A1, what is process to capture data from the VMs?

Second, for a physical tap

If I have this old nTap (pic attached), how can it be used to capture traffic data coming into ESXi-1 from ESXi-2?

Also, for another use case, instead of using a virtual tap, could I use the old nTap to capture traffic data between the VM on vSwitch2 that is connected to ESXi nic2 and a VM on vSwitch3 connected to ESXi nic3

Question by:sjniii
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
LVL 123
ID: 42293201
Port Mirror is the method to use for vSwitches

Author Comment

ID: 42294378
i believe port mirroring is only for the Distributed Switch not the Standard Switch based on eh little I read.

Also, I am looking for info on how to configure a test for using

virtual taps on a standard switch
virtual taps on a distributed switch
physical tap (like the old nTAP)  - in the environment is it connected to the physical nics on an esxi host or to a switch or both?
LVL 123
ID: 42294400

Author Comment

ID: 42295395
thanks ...i also found a few other articles with a search similar i can post here if there is interest.

However,  any info on using a Physical Tap in conjunction with ESXi Servers?

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Join & Write a Comment

In this article we will learn how to backup a VMware farm using Nakivo Backup & Replication. In this tutorial we will install the software on a Windows 2012 R2 Server.
Ransomware is a malware that is again in the list of security  concerns. Not only for companies, but also for Government security and  even at personal use. IT departments should be aware and have the right  knowledge to how to fight it.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question