Ethernet and Coffee
Guest network trace collection on ESX 6.x
How to capture bidirectional traffic of a VM on ESX 6.x