6.7

Table Of Contents
Table 144. Filter Options of the pktcap-uw Utility (Continued)
Option Description
--ip IP_addess
Capture or trace packets that have a specific source or
destination IPv4 address.
--proto 0xIP_protocol_number
Capture or trace packets at Layer 3 according to the next level
protocol that consumes the payload.
For example, to monitor traffic for the UDP protocol, type
--proto 0x11.
--srcport source_port
Capture or trace packets according to their source TCP port.
--dstport destination_port
Capture or trace packets according to their destination TCP port.
--tcpport TCP_port
Capture or trace packets according to their source or destination
TCP port.
--vxlan VXLAN_ID
Capture or trace packets that belong to a VXLAN.
The vertical bars | represent alternative values.
Capturing Packets by Using the pktcap-uw Utility
Capture packets through the pktcap-uw utility in the path between a virtual switch and the physical
adapters, VMkernel adapters and virtual machine adapters to troubleshoot data transfer in the network
stack on an ESXi host.
Capture Packets That Arrive at a Physical Adapter
Monitor host traffic related to the external network by capturing packets at certain points in the path
between a vSphere Standard Switch or vSphere Distributed Switch and a physical adapter.
You can specify a certain capture point in the data path between a virtual switch and a physical adapter,
or determine a capture point by traffic direction with regard to the switch and proximity to the packet
source or destination. For information about supported capture points, see Capture Points of the pktcap-
uw Utility.
Procedure
1 (Optional) Find the name of the physical adapter that you want to monitor in the host adapter list.
n
In the vSphere Web Client, on the Configure tab for the host, expand Networking and select
Physical adapters.
n
In the ESXi Shell to the host, to view a list of the physical adapters and examine their state, run
the following ESXCLI command:
esxcli network nic list
Each physical adapter is represented as vmnicX. X is the number that ESXi assigned to the physical
adapter port.
vSphere Networking
VMware, Inc. 212