Skip navigation
2014

Would like to share about the incident where this tool gave great hand :-)

 

previously we can capture packets only to the kernel interfaces using tcpdump-uw & cannot capture frames at the uplinks, or vSwitch levels, now it is possible for us to capture packets at VM virtual switch port level, physical uplinks level connected to any type of virtual switches using pktcap-uw utility.

 

how it is useful in a real time scenario ?

 

we had a very big problem that a critical app VM was suspected to have connectivity issues, client connections to the application VM was dropping & initially was not sure where it is happening, as usual severity raised with us for analysis. we used the pktcap utility to get the report @ virtual switch port level, and on the uplinks connected to the virtual switch level, and on reading the report using wireshark clearly proved that the client packets has not even reached physical uplink level and obviously nothing observed at virtual switch port level for the App VM.

 

its was a great help that the tool gave a way to isolate the issue is not within the virtual environment later it was passed on to network team and it was the firewall culprit. not digging much with the issue that we had, just want to emphasis that this tool came in handy to isolate that issue is with or not with vmware end.

 

below is the vmware KB providing end to end steps on how to execute it.

 

http://kb.vmware.com/kb/2051814

 

One point the way VMware listed to get the VM port id is lengthy using esxtop, instead easy way is using the esxcli way of getting it will list the port id as well the associated virtual  NIC mac connected to it, so as you make sure you are running the report for the right Virtualnic.

 

esxcli network vm list -> To get VM’s World ID

esxcli network vm port list -w 10930 --> to get the virtual port id and associated MAC of the virtual NIC

 

single line to capture packets at virtual switch port along with 2 uplinks connected to it as below.

"pktcap-uw --switchport 12345678 -o /vmfs/volumes/Testesx-Localstorage/VMname.pcap & pktcap-uw --uplink vmnic8 -o /vmfs/volumes/Testesx-Localstorage/Testesx_vmnic0.pcap & pktcap-uw --uplink vmnic9 -o /vmfs/volumes/Testesx-Localstorage/Testesx_vmnic1.pcap"

 

From above (switport , report storage location & uplinks alone to be changed) running this in a single go , we should have 3 reports VMname.pcap, Testesx_vmnic0.pcap & Testesx_vmnic1.pcap in the local storage of the esx host that is pointed in the command.

 

Important point: utility may not stop by pressing ctrl+c or ctrl+z so to stop it run the process kill command given in the article.

 

Regards,

Arvinth.

Arvinth Novice

Road to VCDX is open :-)

Posted by Arvinth Oct 19, 2014

Friends , this is a late post sharing my VCAP-DCD experience since i passed the exam in the month of July. I was engaged on my personal works that kept away from my laptop :-).

 

About the exam:- Tough yes, I am an administrator basically and not a designer, it took some time for me to sit for design exam since last October I cleared my VCAP-DCA to prepare myself to look at things like a designer. I think the time i took is good and I recommend not to rush, for me the slow transition worked out.


By this time all would have known with the structure and the pattern of the exam VDCD510  so there is nothing new i could say. But one important bug i noticed in the exam visio tool is " while i revisited to see the corrections i made with my design, BOOM BOOM My corrections was not there. still it was showing the old status" I had this on 2 design scenario's I worked. Not sure if this has fixed, So be careful and to revisit twice to see if the corrections you have made persist.

 

Obviously there is no end to say this preparation is enough for the exam, below are the materials i choosed and sticked to it & did not go vein.

 

  • VMware vSphere Design 2nd Edition Mar 2013 by Forbes Guthrie and Scott Lowe
  • VMware design workshop student manual
  • Train-signal videos on Designing VMware Infrastructure
  • Brown-bag video series
  • Talking about compute,network,storage designs with the design experts, Luckily i got a chance to sit for a small environment design.

 

I've started my preparations for VCDX. I learned that it needs tremendous amount of effort & knowledge, but I hope to achieve it.

Finally I wish you all the very best for the exam & good luck.

 

 

Regards,

Arvinth.