{"id":418,"date":"2013-09-10T12:06:52","date_gmt":"2013-09-10T17:06:52","guid":{"rendered":"https:\/\/www.softwareab.net\/wordpress\/?p=418"},"modified":"2013-09-10T12:06:52","modified_gmt":"2013-09-10T17:06:52","slug":"vmware-dvswitches-and-port-mirroring","status":"publish","type":"post","link":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/","title":{"rendered":"VMware dvSwitches and Port Mirroring"},"content":{"rendered":"<p>When debugging a network problem, the first one wants to do is to&#8230;get the packets! In the past watching network traffic in real-time required either &#8220;promiscuous&#8221; mode network cards (NICs) or using hardware-based &#8220;port mirroring&#8221; on physical switches. Read below for a quick primer on port mirroring using VMware distributed virtual switches!<\/p>\n<p><!--more--><\/p>\n<h3>What&#8217;s the Problem?<\/h3>\n<p>Lots of times you will find that debugging a problem requires looking at the actual network traffic. For example, debugging Kerberos issues almost always devolves into checking packets to see the negotiation between the supplicant and the Key Distribution Center (KDC) on acquisition of the Ticket Granting Ticket (TGT) as well as the Service Ticket (ST). And while Microsoft does offer some level of &#8220;verbose&#8221; Kerberos debug logging to the Windows Event Log (see <a href=\"http:\/\/support.microsoft.com\/kb\/262177\">How to enable Kerberos event logging<\/a> by Microsoft for an example), at the end of the day to see the actual negotiation you *must* resort to packet tracing.<\/p>\n<h3>vSphere to the Rescue!<\/h3>\n<p>It is certainly possible to trace network traffic using either switch-specific commands such as <a href=\"https:\/\/supportforums.cisco.com\/docs\/DOC-5799\">Utilizing the New Packet Capture<\/a> for Cisco switches; or, alternatively to put a NIC into &#8220;promiscuous&#8221; mode to capture traffic sent at the broadcast domain (Layer 2 \/ VLAN level). However, what about traffic that is entirely within a given physical ESXi host? In that case, the network traffic never actually leaves the ESXi hypervisor on that host but instead is directly delivered to the target machine. Thus, classic network trace approaches fail.<\/p>\n<p>But all is not lost! VMware has the ability to support packet capture directly between any two VMs connected by a distributed virtual switch (I call these a <code>dvSwitch<\/code>; others call these a <code>vdSwitch<\/code> but we mean the same thing). In this case &#8211; regardless of whether the VMs are on the same physical ESXi host or completely different hosts makes no difference. The traffic always traverses the dvSwitch so vSphere can track it.<\/p>\n<p>In the next sections we walk through setting up a port mirroring session using real VMs and a real dvSwitch &#8211; let&#8217;s get started!<\/p>\n<h3>Port Mirroring \u00e2\u20ac\u201c VMware dvSwitch Configuration<\/h3>\n<p>The VMware documents the port mirror setup process (especially the <a href=\"http:\/\/pubs.vmware.com\/vsphere-51\/topic\/com.vmware.ICbase\/PDF\/vsphere-esxi-vcenter-server-51-networking-guide.pdf\">vSphere 5.1 Networking Guide<\/a>). In this section, we simply cover the steps as we went through them in our environment.<\/p>\n<ol>\n<li>Assign a &#8220;Mirroring VLAN&#8221;. This will be a VLAN that exists just to transmit captured traffic to a destination VM. In our example, we selected VLAN 205 but you can select any available (unused) VLAN. As with any VLAN, be sure that you understand the impact on upstream physical switches! For example, if you have a physical switch connecting two ESXi hosts each of which is part of a dvSwitch you must be ensure that you have properly &#8220;trunked&#8221; the switchport to allow this VLAN to traverse. On a Cisco switch, this might be a command like <code>switchport trunk allowed vlan 205<\/code>.<\/li>\n<li>Create a new portgroup (we named ours <code>dvPgMirror<\/code>) to use the assigned mirroring VLAN (205). This portgroup must be associated with an distributed virtual uplink (dvUplink) that is connected to a physical switchport trunked to allow that VLAN. Our environment used what we call our &#8220;standard&#8221; dvUplink (which shares traffic with a number of other VLANs. See shot below:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png\" alt=\"portmirror_10\" width=\"300\" height=\"150\" class=\"alignnone size-medium wp-image-426\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10.png 482w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<li>\nAssign dvPgMirror to a VM that has a network monitor installed. The following shot shows it assigned to VM named MGTSRVR003UX:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_20.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_20-300x125.png\" alt=\"portmirror_20\" width=\"300\" height=\"125\" class=\"alignnone size-medium wp-image-428\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_20-300x125.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_20.png 588w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<li>\nWithin the running VM (still MGTSRVR003UX in our example), perform any network-specific configuration. In the following shot, the VM has had the adapter renamed to <code>dvPgMirror<\/code> to make it obvious that it is the port mirror adapter. The adapter has also had a nonroutable IP address assigned&#8230;there is neither gateway nor DNS set:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_30.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_30-300x143.png\" alt=\"portmirror_30\" width=\"300\" height=\"143\" class=\"alignnone size-medium wp-image-429\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_30-300x143.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_30.png 562w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<li>\nInstall appropriate packet capturing software. For this use case, we fell back on old&#8217;n&#8217;reliable Network Monitor (see <a href=\"http:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=4865\">this Microsoft download site<\/a> for a free download link). Depending upon your guest OS, you could use different tools&#8230;as long as the tool can capture network traffic, you&#8217;re golden.\n<\/li>\n<\/ol>\n<p>This completes the port mirroring setup for a dvSwitch. Next&#8230;let&#8217;s start using that puppy and tracing some traffic!<\/p>\n<h3>Execute Port Mirroring on VMware dvSwitches<\/h3>\n<p>Follow along with us in these steps to see how an administrator can perform a port mirroring session.<\/p>\n<ol>\n<li>\n<strong>Ensure mirror portgroup networking is configured.<\/strong> Basically &#8211; be sure you have the basic <code>dvPgMirror<\/code> portgroup created, assigned the correct &#8220;mirror VLAN&#8221; (205 for us), and that a VM  has the <code>dvPgMirror<\/code> portgroup assigned to it. In short&#8230;the previous section :)and that the related NIC is configured \u00e2\u20ac\u201c these steps are all documented in the Tech Guide. (Note that the VM should have appropriate packet capture software such as Network Monitor 3.4 already installed.)\n<\/li>\n<li>\n<strong>Determine the source port.<\/strong> The source port is the port to analyze. For this example session, we are analyzing traffic on the our F5 Load Balancer through what we&#8217;ve labeld our &#8220;DMZ subnet&#8221;. This subnet has its own portgroup (<code>dvPgDMZ<\/code>) connected to the same dvSwitch as the <code>dvPgMirror<\/code> portgroup. Within the standalone vSphere Client, we navigated to Home -> Inventory -> Networking, expanded the dvSwitch (dvSwitchCloud), and then selected the DMZ portgroup (dvPgDMZ). Finally, we located the connected F5 virtual machine as shown below and identified that the source port is 448:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_40.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_40-300x129.png\" alt=\"portmirror_40\" width=\"300\" height=\"129\" class=\"alignnone size-medium wp-image-430\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_40-300x129.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_40.png 628w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<li>\n<strong>Determine the destination \u00e2\u20ac\u0153mirror\u00e2\u20ac\u009d port.<\/strong> Open the vCenter and navigate to Home -> Inventory -> Networking, then expand the dvSwitch (dvSwitchCloud), and then select the mirror portgroup (<code>dvPgMirror<\/code>). Determine the VM connected to the mirror port as shown below (MGTSRVR003UX is the VM connected to the <code>dvPgMirror<\/code> portgroup in this example). In the following example, destination port ID 2258 is identified:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_50.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_50-300x127.png\" alt=\"portmirror_50\" width=\"300\" height=\"127\" class=\"alignnone size-medium wp-image-431\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_50-300x127.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_50.png 579w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<li>\n<strong>Create a port mirroring session.<\/strong> Right-click on the dvSwitch name (dvSwitchCloud in this example) and select Properties. Then from the Port Mirroring tab, use the \u00e2\u20ac\u0153Create Port Mirroring Session\u00e2\u20ac\u009d option. In the first screen enter the descriptive name for the session and be sure to select VLAN encapsulation as the captured packets must be tagged to meet the <code>dvPgMirror<\/code> portgroup VLAN requirements (VLAN 205). Also, to minimize performance impact, the \u00e2\u20ac\u0153Mirrored packet length\u00e2\u20ac\u009d option can be enabled to limit the number of bytes captured (60 bytes in the following screenshot):<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_60.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_60-300x151.png\" alt=\"portmirror_60\" width=\"300\" height=\"151\" class=\"alignnone size-medium wp-image-434\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_60-300x151.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_60.png 579w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p\/>\nOn the next screen, enter the source port(s). For this example, it\u00e2\u20ac\u2122s the single port 448 identified from the F5 DMZ portgroup. Note that traffic can be captured based in ingress, egress, or ingress \/ egress combination:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_70.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_70-300x84.png\" alt=\"portmirror_70\" width=\"300\" height=\"84\" class=\"alignnone size-medium wp-image-435\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_70-300x84.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_70.png 581w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p\/>\nFinally, select whether to enable the mirroring session as shown below:<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_80.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_80-300x111.png\" alt=\"portmirror_80\" width=\"300\" height=\"111\" class=\"alignnone size-medium wp-image-436\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_80-300x111.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_80.png 586w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<\/ol>\n<p>That&#8217;s it&#8230;we have our mirroring session setup. Next, we want to verify it&#8217;s working by capturing some traffic.<\/p>\n<h3>Verify Port Mirroring Works \u00e2\u20ac\u201c Let&#8217;s Capture Traffic!<\/h3>\n<p>If you&#8217;ve gotten here, congrats! You are just about ready to reap the fruits of your labor by seein&#8217; some traffic flow. Follow these steps along with us:<\/p>\n<ol>\n<li>\nOn the port mirroring destination (the VM with dvPgMirror portgroup, port 2258) open Network Monitor (or other sniffing tool). Remember that for us this is the MGTSRVR003UX server.\n<\/li>\n<li>\nStart a session on the destination port mirror NIC (the one labeled \u00e2\u20ac\u0153dvPgMirror\u00e2\u20ac\u009d below):<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_90.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_90-300x251.png\" alt=\"portmirror_90\" width=\"300\" height=\"251\" class=\"alignnone size-medium wp-image-437\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_90-300x251.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_90.png 392w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<li>\nWithin the session, put in any required filters. The below filter captures traffic initiated or returned from IP 172.24.4.52 (note that this is *not* the IP of the NIC on the VM running Network Monitor; it is an IP from another unrelated VM):<br \/>\n<a href=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_100.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_100-300x110.png\" alt=\"portmirror_100\" width=\"300\" height=\"110\" class=\"alignnone size-medium wp-image-439\" srcset=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_100-300x110.png 300w, https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_100.png 579w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a>\n<\/li>\n<\/ol>\n<p>And &#8211; hey presto &#8211; it works! I ran some <code>ping<\/code> commands to hit my F5 load balancer box from the 172.24.4.52 VM, and all the traffic was captured and *redirected* to my network monitor box.<\/p>\n<p>Sweet! Hope you enjoyed this as much as we did, let me know if it helped.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When debugging a network problem, the first one wants to do is to&#8230;get the packets! In the past watching network traffic in real-time required either &#8220;promiscuous&#8221; mode network cards (NICs) or using hardware-based &#8220;port mirroring&#8221; on physical switches. Read below &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"more-link\" href=\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\"> <span class=\"screen-reader-text\">VMware dvSwitches and Port Mirroring<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,1,11],"tags":[20],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>VMware dvSwitches and Port Mirroring - softwareab<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VMware dvSwitches and Port Mirroring - softwareab\" \/>\n<meta property=\"og:description\" content=\"When debugging a network problem, the first one wants to do is to&#8230;get the packets! In the past watching network traffic in real-time required either &#8220;promiscuous&#8221; mode network cards (NICs) or using hardware-based &#8220;port mirroring&#8221; on physical switches. Read below &hellip; VMware dvSwitches and Port Mirroring Read More &raquo;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\" \/>\n<meta property=\"og:site_name\" content=\"softwareab\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudraticsolutions\/\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/cloudraticsolutions\/\" \/>\n<meta property=\"article:published_time\" content=\"2013-09-10T17:06:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png\" \/>\n<meta name=\"author\" content=\"Andrew Bruce\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@realcloudratics\" \/>\n<meta name=\"twitter:site\" content=\"@realcloudratics\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andrew Bruce\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\"},\"author\":{\"name\":\"Andrew Bruce\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\"},\"headline\":\"VMware dvSwitches and Port Mirroring\",\"datePublished\":\"2013-09-10T17:06:52+00:00\",\"dateModified\":\"2013-09-10T17:06:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\"},\"wordCount\":1242,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\"},\"image\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png\",\"keywords\":[\"vmware\"],\"articleSection\":[\"Network\",\"Teknocratica\",\"VMware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\",\"name\":\"VMware dvSwitches and Port Mirroring - softwareab\",\"isPartOf\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png\",\"datePublished\":\"2013-09-10T17:06:52+00:00\",\"dateModified\":\"2013-09-10T17:06:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10.png\",\"contentUrl\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10.png\",\"width\":482,\"height\":242},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.softwareab.net\/wordpress\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"vmware\",\"item\":\"https:\/\/www.softwareab.net\/wordpress\/tag\/vmware-2\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"VMware dvSwitches and Port Mirroring\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#website\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/\",\"name\":\"softwareab\",\"description\":\"Technocratica, Technopolitik, Technophobia\",\"publisher\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.softwareab.net\/wordpress\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\",\"name\":\"Andrew Bruce\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg\",\"contentUrl\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg\",\"width\":400,\"height\":330,\"caption\":\"Andrew Bruce\"},\"logo\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/\"},\"description\":\"Team-oriented systems mentor with deep knowledge of numerous software methodologies, technologies, languages, and operating systems. Excited about turning emerging technology into working production-ready systems. Focused on moving software teams to a higher level of world-class application development. Specialties:Software analysis and development...Product management through the entire lifecycle...Discrete product integration specialist!\",\"sameAs\":[\"http:\/\/cloudraticsolutions.net\/\",\"https:\/\/www.facebook.com\/cloudraticsolutions\/\",\"https:\/\/twitter.com\/realcloudratics\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"VMware dvSwitches and Port Mirroring - softwareab","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/","og_locale":"en_US","og_type":"article","og_title":"VMware dvSwitches and Port Mirroring - softwareab","og_description":"When debugging a network problem, the first one wants to do is to&#8230;get the packets! In the past watching network traffic in real-time required either &#8220;promiscuous&#8221; mode network cards (NICs) or using hardware-based &#8220;port mirroring&#8221; on physical switches. Read below &hellip; VMware dvSwitches and Port Mirroring Read More &raquo;","og_url":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/","og_site_name":"softwareab","article_publisher":"https:\/\/www.facebook.com\/cloudraticsolutions\/","article_author":"https:\/\/www.facebook.com\/cloudraticsolutions\/","article_published_time":"2013-09-10T17:06:52+00:00","og_image":[{"url":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png"}],"author":"Andrew Bruce","twitter_card":"summary_large_image","twitter_creator":"@realcloudratics","twitter_site":"@realcloudratics","twitter_misc":{"Written by":"Andrew Bruce","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#article","isPartOf":{"@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/"},"author":{"name":"Andrew Bruce","@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600"},"headline":"VMware dvSwitches and Port Mirroring","datePublished":"2013-09-10T17:06:52+00:00","dateModified":"2013-09-10T17:06:52+00:00","mainEntityOfPage":{"@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/"},"wordCount":1242,"commentCount":0,"publisher":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600"},"image":{"@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage"},"thumbnailUrl":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png","keywords":["vmware"],"articleSection":["Network","Teknocratica","VMware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/","url":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/","name":"VMware dvSwitches and Port Mirroring - softwareab","isPartOf":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage"},"image":{"@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage"},"thumbnailUrl":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10-300x150.png","datePublished":"2013-09-10T17:06:52+00:00","dateModified":"2013-09-10T17:06:52+00:00","breadcrumb":{"@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#primaryimage","url":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10.png","contentUrl":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2013\/09\/portmirror_10.png","width":482,"height":242},{"@type":"BreadcrumbList","@id":"https:\/\/www.softwareab.net\/wordpress\/vmware-dvswitches-and-port-mirroring\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.softwareab.net\/wordpress\/"},{"@type":"ListItem","position":2,"name":"vmware","item":"https:\/\/www.softwareab.net\/wordpress\/tag\/vmware-2\/"},{"@type":"ListItem","position":3,"name":"VMware dvSwitches and Port Mirroring"}]},{"@type":"WebSite","@id":"https:\/\/www.softwareab.net\/wordpress\/#website","url":"https:\/\/www.softwareab.net\/wordpress\/","name":"softwareab","description":"Technocratica, Technopolitik, Technophobia","publisher":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.softwareab.net\/wordpress\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600","name":"Andrew Bruce","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/","url":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg","contentUrl":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg","width":400,"height":330,"caption":"Andrew Bruce"},"logo":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/"},"description":"Team-oriented systems mentor with deep knowledge of numerous software methodologies, technologies, languages, and operating systems. Excited about turning emerging technology into working production-ready systems. Focused on moving software teams to a higher level of world-class application development. Specialties:Software analysis and development...Product management through the entire lifecycle...Discrete product integration specialist!","sameAs":["http:\/\/cloudraticsolutions.net\/","https:\/\/www.facebook.com\/cloudraticsolutions\/","https:\/\/twitter.com\/realcloudratics"]}]}},"_links":{"self":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts\/418"}],"collection":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/comments?post=418"}],"version-history":[{"count":7,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts\/418\/revisions"}],"predecessor-version":[{"id":440,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts\/418\/revisions\/440"}],"wp:attachment":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/media?parent=418"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/categories?post=418"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/tags?post=418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}