Host capture where NSX Manager was present.
-----------------------------------------------------------------root@ESXIhost:~] pktcap-uw --uplink vmnic4 --proto 0x01 --capture UplinkSndKernel,UplinkRcvKernel -o - | tcpdump-uw -enr -| grep 10.x.x132The name of the uplink is vmnic4.The session filter IP protocol is 0x01.The session capture point is UplinkSndKernel,UplinkRcvKernel.pktcap: The output file is -.pktcap: No server port specifed, select 48301 as the port.pktcap: Local CID 2.pktcap: Listen on port 48301.pktcap: Main thread: 36745153728.pktcap: Dump Thread: 36745684736.pktcap: The output file format is pcapng.reading from file -, link-type EN10MB (Ethernet)pktcap: Recv Thread: 36746213120., snapshot length 65535pktcap: Accept...pktcap: Vsock connection from port 1031 cid 2.07:54:12.057160 00:00:10:03:09:59 > 00:#:#:#:#:92, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 11765, length 4007:54:12.057234 00:#:#:#:#:92 > 00:#:#:#:#:09, ethertype IPv4 (0x0800), length 74: 10.x.x.87 > 10.x.x132: ICMP echo reply, id 13, seq 11765, length 4007:54:16.669860 00:00:10:03:09:59 > 00:#:#:#:#:92, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 11770, length 4007:54:16.669935 00:#:#:#:#:92 > 00:#:#:#:#:09, ethertype IPv4 (0x0800), length 74: 10.x.x.87 > 10.x.x132: ICMP echo reply, id 13, seq 11770, length 4007:54:21.661616 00:00:10:03:09:59 > 00:#:#:#:#:92, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 11771, length 4007:54:21.661703 00:#:#:#:#:92 > 00:#:#:#:#:09, ethertype IPv4 (0x0800), length 74: 10.x.x.87 > 10.x.x132: ICMP echo reply, id 13, seq 11771, length 4007:54:31.490125 00:00:10:03:09:59 > 00:#:#:#:#:92, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 11776, length 4007:54:31.490207 00:#:#:#:#:92 > 00:#:#:#:#:09, ethertype IPv4 (0x0800), length 74: 10.x.x.87 > 10.x.x132: ICMP echo reply, id 13, seq 11776, length 40tcpdump-uw: pcap_loop: error reading dump file: Interrupted system callpktcap: Receive thread exiting...pktcap: error: Error writing 28 bytes of pkt header to file.pktcap: Destroying session 2.pktcap:pktcap: Dumped 767 packet dropped 0 packets.pktcap: Done.
Host capture where jumphost was present
---------------------------------------------------------[root@ESXIhost:~] pktcap-uw --uplink vmnic1 --proto 0x01 --capture UplinkSndKernel,UplinkRcvKernel -o - | tcpdump-uw -enr -| grep 10.x.x.87The name of the uplink is vmnic1.The session filter IP protocol is 0x01.The session capture point is UplinkSndKernel,UplinkRcvKernel.pktcap: The output file is -.pktcap: No server port specifed, select 44995 as the port.pktcap: Local CID 2.pktcap: Listen on port 44995.pktcap: Main thread: 679209778048.pktcap: Dump Thread: 679210313472.pktcap: Recv Thread: 679210841856.pktcap: Accept...pktcap: Vsock connection from port 1032 cid 2.reading from file -, link-type EN10MB (Ethernet)08:25:18.555557 00:#:#:#:#:2e > 02:#:#:#:#:55, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 12360, length 4008:25:23.162825 00:#:#:#:#:2e > 02:#:#:#:#:55, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 12365, length 4008:25:28.168985 00:#:#:#:#:2e > 02:#:#:#:#:55, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 12366, length 4008:25:33.161599 00:#:#:#:#:2e > 02:#:#:#:#:55, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 12369, length 4008:25:38.171683 00:#:#:#:#:2e > 02:#:#:#:#:55, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 12372, length 4008:25:43.169705 00:#:#:#:#:2e > 02:#:#:#:#:55, ethertype IPv4 (0x0800), length 74: 10.x.x132 > 10.x.x.87: ICMP echo request, id 13, seq 12373, length 40tcpdump-uw: pcap_loop: error reading dump file: Interrupted system callpktcap: Join with dump thread failed.pktcap: Destroying session 2.pktcap:pktcap: Dumped 19 packet to file -, dropped 0 packets.pktcap: Done.
VMware NSX-T Data Center
VMware NSX
Duplicate mac address present in the arp table of the physical switch
Clear the Duplicate mac address on the switch to have the proper connectivity