The pktcap-uw utility supports capture points that can be used only when you monitor uplink, VMkernel or virtual machine traffic, and capture points that represent special places in the stack that are not related to the adapter type.

The pktcap-uw --uplink vmnicX command supports capture points for functions that handle traffic at a specific place and direction in the path between the physical adapter and the virtual switch.

Capture Point

Description

UplinkRcv

The function that receives packets from the physical adapter.

UplinkSnd

The function that sends packets to the physical adapter.

PortInput

The function that passes a list of packets from UplinkRcv to a port on the virtual switch.

PortOutput

The function that passes a list of packets from a port on the virtual switch to the UplinkSnd point.

The pktcap-uw --switchport vmxnet3_port_ID command supports capture points for functions that handle traffic packets at a specific place and direction in the path between a VMXNET3 adapter and a virtual switch.

Capture Point

Description

Vmxnet3Rx

The function in the VMXNET3 backend that receives packets from the virtual switch.

Vmxnet3Tx

The function in the VMXNET3 backend that sends packets from the virtual machine to the virtual switch.

PortOutput

The function that passes a list of packets from a port on the virtual switch to Vmxnet3Rx.

PortInput

The function that passes a list of packets from Vmxnet3Tx to a port on the virtual switch. Default capture point for traffic related to a VMXNET3 adapter.

The pktcap-uw --vmk vmkX and pktcap-uw --switchport vmkernel_adapter_port_ID commands support capture points that represent functions at a specific place and direction in the path between a VMkernel adapter and a virtual switch.

Capture Point

Description

PortOutput

The function that passes a list of packets from a port on the virtual switch to the VMkernel adapter.

PortInput

The function that passes a list of packets from the VMkernel adapter to a port on the virtual switch. Default capture point for traffic related to a VMkernel adapter.

The pktcap-uw --dvfilter divfilter_name command requires a capture point that indicates whether to capture packets when they enter the DVFilter or when they leave it.

Capture Point

Description

PreDVFilter

The point before a DVFilter intercepts a packet.

PostDVFilter

The point after a DVFilter intercepts a packet.

Certain capture points are mapped directly to the network stack rather than to a physical, VMkernel or VMXNET3 adapter.

Capture Point

Description

Drop

Captures dropped packets and shows the place where drops occur.

TcpipDispatch

Capture packets at the function that dispatches traffic to the TCP/IP stack of the VMkernel from the virtual switch, and the reverse.

PktFree

Capture packets right before they are released.

VdrRxLeaf

Capture packets at the receive leaf I/O chain of a dynamic router in VMware NSX. Use this capture point together with the --lifID option.

VdrRxTerminal

Capture packets at the receive terminal I/O chain of a dynamic router in VMware NSX. Use this capture point together with the --lifID option.

VdrTxLeaf

Capture packets at the transmit leaf I/O chain of a dynamic router in VMware NSX. Use this capture point together with the --lifID option.

VdrTxTerminal

Capture packets at the transmit terminal I/O chain of a dynamic router in VMware NSX. Use this capture point together with the --lifID option.

For information about dynamic routers, see the VMware NSX documentation.