About How to take packet capture which including global ip address.

Michiteru Sugitani 70 Reputation points
2023-05-10T00:46:32.8633333+00:00

Hi All,

I need take packet capture which including global ip address of Linux VM.

If I taken capture using tcpdump on Linux VM, source and destination are local address of Linux VM.

I would like to take capture which source and destination are glocal ip address of VM(it mean outside of NAT)

If I use network watcher is it possible this?

Best regards.

Michiteru

Azure Network Watcher
Azure Network Watcher
An Azure service that is used to monitor, diagnose, and gain insights into network performance and health.
161 questions
Accepted answer
  1. ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee
    2023-05-22T18:06:31.4233333+00:00

    @Michiteru Sugitani

    Thank you sharing the details here, I am sorry I got confused with your set-up here.

    As per the screenshot shared I can see that the Publc IP is assigned to the VM itself and when you did a Tcpdump the Public IP address is not present and the packet capture shows the private IP instead.
    This is an expected behavior by design, by default in Azure the VM's private IP address will be NATed to Public IP when you are reaching out to the internet as described here.

    Even Network watchers packet capture functionality will not capture the Public IP address in this case. The packet capture will contain private IP addresses of the VM.

    Hope this answers your question. Thank you for your patience here. Please let me know if you have any further questions. Thank you!

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest