Packet capture ESXi host: one file and only one file

[vmmedmed]

One of my team mates ran a packet capture so as to generate only 10MB files. I believe

his intention was that it would create one 10MB file and stop. But it made another and

another until the session became stuck. We'll reboot the host and everything's still

running ok. But the question is - what would be the syntax to create packet capture

for a certain vmnic that outputs one and only one file of size 10MB?

Thank you.

[Nawals]

If you are using pktcap utility or tcpdump then you can use  like below

pktcap-uw --switchport 83886082 --dir 0 -o /vmfs/volumes/LocalSSD/PAN1-vwire1.pcap -C 10

pktcap-uw --uplink vmnic0 --dir 0 -o /vmfs/volumes/LocalSSD/PAN1-vwire1.pcap -C 10

tcpdump-uw -i vmk0 -s 1514 -C 10M -W 1 -w /var/tmp/test.pcap

[vmmedmed]

Thank you!