I would like to capture all VM network traffic from Xenserver, including all remote and local area connections, eg VM-Internet traffic and VM-VM traffic. I had assumed that setting up tcpdump to capture on the xenbr0 interface would suffice, however the capture only shows traffic to/from Dom0. If I capture on eth0, then I can see all outbound traffic, but not VM to VM traffic.
Can someone assist in helping me find a way to access all of the traffic on the XenServer? I would much rather monitor on one interface only, rather than the possible solution of monitoring each vif interface.
Thanks in advance for any help.