Page 1 of 1

ESX5i : Netflow monitoring

Posted: Tue Mar 25, 2014 8:44 am
by kbeuseli
Hello,

We are testing Nagios NA in a seperate VM deployed with an OVA.
Found out that it is possible to monitor network traffic originating virtual distributed switch from Vmware ESX.
In Nagios NA we receive all the trafic from the ESX but without any detail , in order words the reports are empty.
The Bandwidth graph shows traffic but the time is not correct , it run four hours ahead of current time.
Another source (hp switch) shows as expected.

regards
Koen

Re: ESX5i : Netflow monitoring

Posted: Tue Mar 25, 2014 3:44 pm
by slansing
What are your php and system time/date settings on the switch vs your NNA server, you should be able to match them up by checking the following commands:

Code: Select all

date

cat /etc/php.ini | grep 'timezone'
How to change your php.ini timezone:
http://www.inmotionhosting.com/support/ ... hpini-file

How to change your system time on a CentOS system "Be sure to use your actual system's local timezone that matches with the php time":
http://www.timgalyean.com/posts/to-chan ... me-centos/

Re: ESX5i : Netflow monitoring

Posted: Wed Mar 26, 2014 5:29 am
by kbeuseli
Hi slansing,

Thank you for the time fix, that's ok now.
Still on my ESX source no sign of detailed traffic. (top 5 talkers)
How can I check if the flows contains correct info ?

regards
Koen

Re: ESX5i : Netflow monitoring

Posted: Wed Mar 26, 2014 1:00 pm
by abrist
Which direction was the date/time off, and by how much?

Re: ESX5i : Netflow monitoring

Posted: Thu Mar 27, 2014 2:58 am
by kbeuseli
Hi,

The timezone was EDT instead of CET. About 6 hours difference. I removed the sources and added them again to start with a clean graph.
Still having the issue that no detail of the traffic is visible. (only ESX)

regards
Koen

Re: ESX5i : Netflow monitoring

Posted: Thu Mar 27, 2014 2:59 pm
by tmcdonald
Can you try to pull up the graph then show us some lines in your log files? After you have the page loaded, run the following and post the output here:

Code: Select all

tail -30 /var/log/httpd/error_log
tail -30 /var/log/httpd/access_log
If anything in there is sensitive feel free to replace it with X or something.