This is our old Q&A Site. Please post any new questions and answers at

Using Wireshark of course.

asked 05 Aug '13, 04:20

dhop's gravatar image

accept rate: 0%

edited 05 Aug '13, 13:43

cmaynard's gravatar image

cmaynard ♦♦

Are you looking to capture on the VM host or in the VM itself?

(05 Aug '13, 12:18) grahamb ♦

Looking at capturing in the VM itself. We have two VM host chassis with several virtual servers that were created in each one. One VM host is using Cisco 1000v for its virtual switch. The other one is currently using HP's virtual switch. I need to capture packets in both environments. I started with the 1000v environment and wanted to have a seperate VM server/workstation run Wireshark and have its virtual port be a destination SPAN port for another server's source port. When I do this, my virtual network to the wireshark virtual server (remote desktop access) is dropped. I will end up placing wireshark on the virtual server I want to capture packets to work around this issue. However, I want to be able to run wireshark on another virtual server so that it won't possibly cause problems on a production virtual server. I haven't started to work with the HP virtual switch.

(06 Aug '13, 04:21) dhop

Perhaps the following presentation given by Jasper Bongertz at Sharkfest '11 will be useful to you: Wireshark vs. "The Cloud".

permanent link

answered 05 Aug '13, 13:46

cmaynard's gravatar image

cmaynard ♦♦
accept rate: 20%


You can also check my blog for two posts explaining capture on VMware vSphere, in case that's what you need:

(05 Aug '13, 16:00) Jasper ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 05 Aug '13, 04:20

question was seen: 5,410 times

last updated: 06 Aug '13, 04:21

p​o​w​e​r​e​d by O​S​Q​A