Pro tip, pipe the output of pktcap-uw to tcpdump-uw and it’ll decode the hex output into readable output: pktcap-uw -o - | tcpdump-uw -enr - Additionally, the direction option for pktcap-uw is with regards to the virtual switch, ie input to the virtual switch or output from the virtual switch. When capturing for uplinks vs other connectees (vmk, vm vnic) etc the behaviour is different. For example “input” for a vm/vmk would be egress traffic from the vm/vmk, but “input” for an uplink port would be ingress traffic as it’s entering the virtual switch. A flag was added in vSphere 7 for pktcap-uw which allows you to use a rich capture filter (-rcf) so that you can use friendly expressions like you’d use with tcpdump on a Linux machine etc. Not available for < 7.0 though. Lastly, the direction flag having option “2” for input and output at the same time was introduced in 6.7 I think, prior to that (
If they have the same name, they're the same course. But all of my new courses are only on techbytes from now on. I've also got a handful of instructors creating courses now which are going to exclusively be on techbytes as well!
Pro tip, pipe the output of pktcap-uw to tcpdump-uw and it’ll decode the hex output into readable output:
pktcap-uw -o - | tcpdump-uw -enr -
Additionally, the direction option for pktcap-uw is with regards to the virtual switch, ie input to the virtual switch or output from the virtual switch. When capturing for uplinks vs other connectees (vmk, vm vnic) etc the behaviour is different. For example “input” for a vm/vmk would be egress traffic from the vm/vmk, but “input” for an uplink port would be ingress traffic as it’s entering the virtual switch.
A flag was added in vSphere 7 for pktcap-uw which allows you to use a rich capture filter (-rcf) so that you can use friendly expressions like you’d use with tcpdump on a Linux machine etc. Not available for < 7.0 though.
Lastly, the direction flag having option “2” for input and output at the same time was introduced in 6.7 I think, prior to that (
Hi Mike, Is there any difference between the courses you upload on Udemy and the techbytes ?
If they have the same name, they're the same course. But all of my new courses are only on techbytes from now on. I've also got a handful of instructors creating courses now which are going to exclusively be on techbytes as well!
Thank you. I will stick with techbytes than. Any chance you will also do CCIE course :)
where the link of full course