How to packet capture leaving/ entering vmnic in vSphere

I was with a GSS Support today troubleshooting NSX issue on one of my engagement. He did a packet trace from ESXi hosts to see if there is traffic leaving/ entering the physical NIC which really nice. This will be helpful in establishing if the issue is somewhere in the environment or not.

Here’s the command


pktcap-uw –uplink vmnic0 –capture UplinkRcvKernel -o -| tcpdump-uw -nr –


pktcap-uw –uplink vmnic0 –capture UplinkSndKernel -o -| tcpdump-uw -nr –

You can grep the result as you see fit.


Leave a Reply


This site uses Akismet to reduce spam. Learn how your comment data is processed.