Sniffing vSwitch traffic from a Hyper-V host

Question

Hello,

I have a Hyper-V setup with twenty Windows VMs. I would like to monitor all the network traffic between these VMs. Is there a way to sniff the vSwitch traffic? Something like mirroring this vSwitch to a physical port on the host to which I can plug a packet sniffer or a laptop with wireshark to see all the VM traffic.

All that I could find so far is mirroring the traffic from all the VMs to another VM, or mirroring the traffic from a physical port to a VM. However, I'm trying to mirror traffic from all VMs to a physical port.

Thanks in advance!

Answer 1

Hello,

You can use Hyper-V-specific counters in Performance Monitor on the Hyper-V host to monitor network resources on this Hyper-V virtual machine.

Best Regards

Zunhui

Answer 2

Zunhui,

Thanks for the response. I understand this provides the network statistics. However, I'm looking for actual network traffic for deep packet inspection.

Regards!

Answer 3

Hi,

Based on your needs, I suggest you refer to the following links:

Using Wireshark to Analyze and Troubleshoot Hyper-V Networking (altaro.com)

(Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information)

Best Regards

Zunhui