When running a tcpdump within ESX you may see only broadcast traffic this is due to your vSwitch not being in promiscuous mode. To resolve this do the following :
- Within the vShpere Client go to Configuration / Networking.
- Choose the virtual switch that your would like to capture the traffic on.
- On the virtual switch click Properties.
- Under the Ports Tab choose your vSwitch and select Edit.
- Within the Security Tab set Promiscuous mode to Accept.
Full details of enabling your vSwitch for tcpdump please see here.
Rick Donato is a Network Automation Architect/Evangelist and the founder of Packet Coders.
Latest posts by Rick Donato (see all)
- NETCONF & YANG: Automate Network Configs via Python - April 2, 2026
- Palo Alto – How to Configure Your Next-Generation Firewall - April 2, 2026
- Fortinet– How to configure NTP on FortiGate - January 13, 2026
Want to become a VMware expert ?
Here is our hand-picked selection of the best courses you can find online:
Complete VMware Administration course
VMware vSphere 8 – Install, Configure, Manage
and our recommended certification practice exams:
Delta Practice Tests