run_traceflow
Trace a packet's path through NSX overlay to identify which DFW rule drops a flow, returning hop-by-hop observations and operation state.
Instructions
[WRITE] Run a Traceflow to trace a packet's path through the NSX overlay.
Injects a synthetic probe from the source port. Returns traceflow_id, operation_state (IN_PROGRESS / FINISHED / FAILED) and hop-by-hop observations typed by resource_type; Dropped* ones carry reason and acl_rule_id. Use it to find which DFW rule drops a flow, then get_dfw_rule_stats on that rule. A FINISHED traceflow is deleted server-side and its id 404s; only one still IN_PROGRESS at timeout_seconds survives for get_traceflow_result to poll.
Args: src_lport_id: Source logical port ID — the VM NIC attachment UUID. This skill does not enumerate ports; run vmware-nsx's get_segment_port_for_vm to obtain one. src_ip: Probe source IP. dst_ip: Destination IP. protocol: TCP, UDP or ICMP (default TCP). dst_port: Destination port for TCP/UDP (default 80). src_port: Source port for TCP/UDP (default 1234). ttl: IP TTL (default 64). timeout_seconds: Max seconds to wait (default 20). target: Optional NSX Manager target from config.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | No | ||
| dst_ip | Yes | ||
| src_ip | Yes | ||
| target | No | ||
| dst_port | No | ||
| protocol | No | TCP | |
| src_port | No | ||
| src_lport_id | Yes | ||
| timeout_seconds | No |