Limitation on the NSX Manager Packet Capture stream mode

Products

• VMware NSX

Issue/Introduction

This article provides clarification that in Packet Capture stream mode, the stream port must be specified as 4754.

Note: This is based on RFC8086 (GRE in UDP).

Symptoms:
In a Packet Capture stream mode and if the port is not set correctly, you see this symptom:

The stream server fails to receive the packet.

Environment

VMware NSX-T Data Center
VMware NSX-T Data Center 2.x

Cause

This issue occurs because the host uses the GRE in UDP encapsulation to sent the packet to remote stream server.

Accordingly to RFC8086, the destination port can be either GRE-in-UDP (4754) or GRE-UDP-DTLS (4755).
Currently only the GRE-in-UDP is supported. For more information, see GRE-in-UDP Encapsulation .

Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third- party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.

Resolution

To resolve this issue, configure the stream port to 4754 to receive the data.