Hi,
ESXi offers some extented methods to capture network packets. Here are some examples.
First of all logon to your ESXi host by ssh.
To capture all traffic on a vmkernel interface use tcpdump-uw.
List all vmkernel interfaces
~ # esxcfg-vmknic -l
Interface
vmk0 .....
vmk1 .....
Continue reading ESXi: Capture Network packets on a vSwitch port or on a VM’s NIC