nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Netflow info from ESXi 5 distributed switch

cdoughty

Has anyone been able to capture flows from the new vcenter distributed switch in vSphere 5? I can add the hosts and the vcenter as a source, but never receive any flows.

Find more posts tagged with

vmkernel

netflow

network

nta

monitoring

Accepted answers

All comments

GoldTipu

Are you be able to see the flows on Orion NTA port 2055 ?

run wireshark to see if flows hitting to Orion from switch source . you need to add Vcenter switch as a node in Orion NPM to recognize the flow from source .

dregier

I would like to get this to work also. Did you have any luck making it work?

mcbridea

A packet captur off the NTA server would be golden.

dregier

NTA is showing the following error when I add a vm to the distributed switch.

" NetFlow Receiver Service [ORIONSERVER] is receiving a NetFlow data stream from an unmanaged interface on vcenter. The NetFlow data stream will be discarded. Please use Orion Node Management to manage interface '#131' in order to process this NetFlow data stream, or just use Edit this device."

I have setup the distributed switch so the traffic appears to come from the vCenter server instead of coming from each vSphere server individually. How do I add interface #131 to NPM so I can monitor it with NTA?

dregier

Anyone have any ideas?

danielleh

Hi dregier--

I have this marked for the PM to review.

galliker01

Hi,

Do you have any news from the PM?

Andi

mavturner

Hi everyone sorry for being late to the conversation. Basically, since the vSwitch doesn't have SNMP on it, we can't correlate the traffic with the interface index on the switch. Because of this, we have to add support via the VMware API (which is what NPM leverages to pull basic virtualization information about the guests and hosts).

In short, it's not something that works now but it's definetly on our radar to add support for in the future.

Mav