How do pass a network span port directly into KVM instance? (Netflow analyser)

victorhooi

Active Member
Apr 3, 2018
250
20
38
37
Hi,

I'm trying to setup Elastiflow (Netflow traffic analyser) on a KVM instance.

That means I need to pass our WAN traffic into this instance.

I can setup a span port on our switch, and plug that into one of the secondary NICs on the ProxMox host.

However, how do I then pass this NIC directly into a given KVM instance?

Thanks,
Victor
 
Netflow/SFlow/IPFIX do not require port mirroring. It's the entire point of the different protocols. Network devices deliver packet summaries to a destination IP address with an appropriate logging/parsing/presentation tool (ElastiFlow in this case).
 
Ah yes - but the Unifi switch range does not support Netflow.

That's why I figured the next best thing was to install nProbe, or vflow on a KVM instance, and connect a spanning or mirrored port into that instance.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!