VMware Cloud Infrastructure and StealthWatch FlowSensor
In July of this year VMware announced it's new vSphere 5 and Comprehensive Cloud Infrastructure Suite. For many businesses this release begins to improve performance of the virtualized environment to the point where even the most resource-intensive applications can be moved into the cloud. A few days after the primary product announcement VMware announced that “as part of the Network Monitoring and Troubleshooting features, vSphere 5 provides NetFlow and Port Mirroring capabilities”. vSphere 5.0 will provide native support for NetFlow v5. Netflow v5 is available on many routers from different brands, but is restricted to IPv4 flows. In contrast Netflow v9 is template based and you can export almost any information from a router or switch including Layer 2 through 7 information, routing information, IP version 6 (IPv6), IP version 4 (IPv4), multicast, and Multiprotocol Label Switching (MPLS) information.
If you are running the latest VMware suite and yet you need the information that only Newflow v9 can deliver then there is a very simple and elegant solution: StealthWatch FlowSensor VE. The StealthWatch FlowSensor VE (Virtual Edition) is a lightweight, “virtual appliance” designed to run as a virtual machine (VM) inside a VM server (i.e., ESX host). The FlowSensor passively captures traffic traveling between VMs, classifies the traffic into an internal NetFlow-like cache, and then exports the traffic metadata via NetFlow.
Tweet





Post a Comment
Join the conversation. Post a comment using the form below.