 | 1 | initial version |
Appears that capture is working and it is a storage problem.
Storing large captures to esxi OS partitions is probably not good.
/tmp is 256M which matches when capture ends in the last comment above.
[root@esx1:~] vdf -h | tail -10
-----
Ramdisk Size Used Available Use% Mounted on
root 32M 2M 29M 7% --
etc 28M 184K 27M 0% --
opt 32M 0B 32M 0% --
var 48M 340K 47M 0% --
tmp 256M 64K 255M 0% --
iofilters 32M 0B 32M 0% --
shm 1024M 0B 1024M 0% --
hostdstats 569M 3M 565M 0% --
Using /scratch is a better practice. The article below works through verifying the current location and how to configure if not present. If on a datastore check available space and configure total capture size to not overfill.
Creating a persistent scratch location for ESXi 7.x/6.x/5.x/4.x
"VMware recommends that ESXi has a persistent scratch location available for storing temporary data including logs, diagnostic information, and system swap."
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.