Network Watcher feature that records a VM's traffic, filtered by 5-tuple and bounded by a time limit (18,000 seconds, or 5 hours, by default). It depends on the Network Watcher Agent extension.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Packet capture in context, with comparison tables and the common traps.
Terms in this definition
- Network Watcher
Collection of Azure network troubleshooting tools: next hop, IP flow verify, packet capture, Connection Monitor and flow logs, among others.
- 5-tuple
The five values that identify a flow: protocol plus the source and destination IP addresses and ports. Azure Load Balancer hashes them by default to spread traffic, and IP flow verify in Network Watcher takes them as its input.
- Network Watcher Agent extension
Packet capture and Connection Monitor both depend on this extension, named
AzureNetworkWatcherExtension. Only Azure VMs and Azure Arc-enabled servers can run it.