Packet capture in VKS Windows nodes

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

This article introduces the commands and methods for capturing network packets on a Windows worker node.

Environment

VMware vSphere Kubernetes Service

Resolution

• Find pod interface ID:
  pktmon comp list
• Start capture pod traffic:
  pktmon start --capture --comp <pod interface ID> --pkt-size 0
• Stop capture:
  pktmon stop
• Convert etl to pcapng:
  pktmon pcapng PktMon.etl  -o <name>.pcapng