Azure Network Watcher | Packet Capture for VM1 to VM2 Traffic Inspection

Inspecting Network Traffic from VM1 to VM2 with Azure Network Watcher

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage a virtual network named VNet1 that is hosted in the West US Azure region.

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Network Watcher, you create a packet capture.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

Use the Connection Monitor feature of Azure Network Watcher.

https://azure.microsoft.com/en-us/updates/general-availability-azure-network-watcher-connection-monitor-in-all-public-regions/

The solution provided appears to meet the goal of inspecting all the network traffic from VM1 to VM2 for a period of three hours.

Azure Network Watcher provides a set of tools and services that can help you monitor, diagnose, and gain insights into your Azure network. One of the services it provides is Packet Capture, which allows you to capture network traffic on a specific virtual machine or subnet.

To use Packet Capture to inspect the network traffic between VM1 and VM2, you would need to follow these steps:

  1. Go to the Azure portal and navigate to the Network Watcher service.
  2. Click on Packet capture in the menu and select "New capture" to create a new packet capture.
  3. In the New packet capture blade, select the virtual network (VNet1) that hosts VM1 and VM2.
  4. Select VM1 as the source and VM2 as the destination for the capture.
  5. Choose a capture duration of three hours and set any other options as needed.
  6. Start the capture.

Once the capture is complete, you can download the captured data and analyze it using a network protocol analyzer such as Wireshark.

In summary, creating a packet capture from Azure Network Watcher appears to be a valid solution to inspect all the network traffic from VM1 to VM2 for a period of three hours.