How to capture data packets under ESX

Use the root account to log on to the command line terminal of the ESX Server where the VM is located, and run the following command:
Vm-support-s-I 10-d 600
 
Vm-support is a tool used to collect ESX information. It can also be used to save the configuration information of ESX. The simplest usage is without any options.
We recommend that you run this script in/tmp. The generated file format is esx-{date}. {PID}. tgz.
A typical vm-support running process is:
[Root @ BI-ESX1 xiaoyu] # time vm-support
 
VMware ESX Server Support Script 1.27
 
Preparing files :-
 
Error running/usr/sbin/esxcfg-info-a/writing to/tmp/esxcfg-info.27960.txt
(Err 1 ).
Do you have a full disk?
Continuing...
 
Preparing files :-
Waiting up to 300 seconds for background commands to complete:
 
Waiting for background commands: |
Creating tar archive...
 
 
File:/tmp/xiaoyu/esx-2006-10-24 -- 14.47.27960.tgz
NOTE: esx-2006-10-24 -- 14.47.27960.tgz is greater than 10 MB.
Please do not attach this file when submitting an incident report.
Please contact VMware support for an ftp site.
To file a support incident, go to http://www.vmware.com/support/sr/sr_login.jsp
 
 
To see the files collected, run: tar-tzf/tmp/xiaoyu/esx-2006-10-24 -- 14.47.27960.tgz
 
Done
 
Real 9m27. 147 s
User 0m56. 290 s
Sys 1m3. 770 s
 
Then you can use tar-tzvf esx-2006-10-24 -- 14.47.27960.tgz to show those files collected
The main information collected is:
/Tmp/aamSupport. pid ha information (VMware HA uses the Legato AAM module)
/Proc/vmware statistics
/Proc/vmware/config configuration information
/Etc
/Etc/sysconfig system configuration information
/Vmfs/volumes VMFS Information
/Var/log information
The output of other commands are all in the tmp directory under the decompressed directory, such as fdisk, uptime, ifconfig, chkconfig, and some esxcfg commands.
Common methods include:
-X: list the running VMS. The information is actually obtained through the ls/proc/vmware/VM/*/names command.
[Root @ BI-ESX1 root] # vm-support-x
 
VMware ESX Server Support Script 1.27
Available worlds to debug:
 
Vmid = 1062 Prod-LotteryWeb
Vmid = 1063 Prod-DWIQ
Vmid = 1081 Prod-AppServer
Vmid = 1086 Prod-P2VHelper-CN
-X world ID: collects information about a VM (the world id can be obtained through-x)
 
 
Because of the FTP function on the ESX host, you can use SCP to copy data to another server for reading. Scp is a file copy with Security and is used for ssh logon. For example, to copy the current file to another remote host, you can run the following command.
Scp/home/daisy/full.tar.gz root@172.19.2.75:/home/root
 
This article is from the "bright tonight" blog