How do pass a network span port directly into KVM instance? (Netflow analyser)

Discussion in 'Proxmox VE: Networking and Firewall' started by victorhooi, May 9, 2018.

  1. victorhooi

    victorhooi Member

    Joined:
    Apr 3, 2018
    Messages:
    31
    Likes Received:
    0
    Hi,

    I'm trying to setup Elastiflow (Netflow traffic analyser) on a KVM instance.

    That means I need to pass our WAN traffic into this instance.

    I can setup a span port on our switch, and plug that into one of the secondary NICs on the ProxMox host.

    However, how do I then pass this NIC directly into a given KVM instance?

    Thanks,
    Victor
     
  2. Alwin

    Alwin Proxmox Staff Member
    Staff Member

    Joined:
    Aug 1, 2017
    Messages:
    1,626
    Likes Received:
    140
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. micush

    micush Member

    Joined:
    Jul 18, 2015
    Messages:
    63
    Likes Received:
    2
    Netflow/SFlow/IPFIX do not require port mirroring. It's the entire point of the different protocols. Network devices deliver packet summaries to a destination IP address with an appropriate logging/parsing/presentation tool (ElastiFlow in this case).
     
  4. victorhooi

    victorhooi Member

    Joined:
    Apr 3, 2018
    Messages:
    31
    Likes Received:
    0
    Ah yes - but the Unifi switch range does not support Netflow.

    That's why I figured the next best thing was to install nProbe, or vflow on a KVM instance, and connect a spanning or mirrored port into that instance.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice