ESXi rhttpproxy logs show removing pcap files even if pcaps are not running nor created
search cancel

ESXi rhttpproxy logs show removing pcap files even if pcaps are not running nor created

book

Article ID: 432640

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction

/var/run/log/rhttpproxy.log

<DATE> In(###) Rhttpproxy[#######]: [Originator@####sub=Default] [PacketCapture] Removing pcap files last modified before: <DATE>

Cause

The cleanup will happen when rhttp service is restarted, upon ESXi system boot or the tmp.json if it's created and configured per the following link.  See Collecting network packets using the lightweight PacketCapture on ESXi.

Resolution

This is working as designed. 

Additional Information

How to Capture Network Packets
Collecting network packets using the lightweight PacketCapture