Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


davidcole

4977 posts

Uber Geek

Trusted

#196450 31-May-2016 18:56
Send private message

So I've just picked up a to link sg1024de rack mount switch. Apparently it does port mirroring, which I assume I can use for looking at lan and wan bandwidth monitoring.

I've hit a could if virtual Linux machines. What would I put in them that's relatively easy to figure out and that would give me some pretty graphs to look at. I dont have a problem to look st, just want to gave a toodle.




Previously known as psycik

OpenHAB: Gigabyte AMD A8 BrixOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Xiaomi Humidity and Temperature sensors and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 10
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


Create new topic
BarTender
3219 posts

Uber Geek

Trusted
Lifetime subscriber

  #1563375 31-May-2016 23:33
Send private message

Graphite/Grafana or Cacti make pretty graphs based on port stats.

 

But if you wanted to get browsing habits of your internals then squid would be required. Then you could use something like this: https://github.com/akashihi/graphite-squid

 

 

 

 





and


davidcole

4977 posts

Uber Geek

Trusted

  #1563421 1-Jun-2016 06:30
Send private message

So if the vm is connected to the same NIC as the host and other vms - should I just be able to connect the lot to the mirroring port (physically) and in the Linux machine just tell it to start collecting?

Or do I need to make some virtual vlans etc and give the Linux Machine two nics .




Previously known as psycik

OpenHAB: Gigabyte AMD A8 BrixOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Xiaomi Humidity and Temperature sensors and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 10
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


 
 
 
 


chimera
431 posts

Ultimate Geek


  #1563534 1-Jun-2016 10:33
Send private message

davidcole: So if the vm is connected to the same NIC as the host and other vms - should I just be able to connect the lot to the mirroring port (physically) and in the Linux machine just tell it to start collecting?

Or do I need to make some virtual vlans etc and give the Linux Machine two nics .

 

If you had a physical machine connected direct to the mirror port, then it would be easy as - you'd just start packet capture with whatever software you're using and away you go.

 

You didn't mention which hypervisor you're running - I'll assume VMWare ESXi...  because you're running a VM and that VM is on a virtual switch, then you will need to enable promiscuous mode on the vSwitch/PG (because with promiscuous mode disabled, then by default the VM will only receive traffic that's destined for it)  





 

 


davidcole

4977 posts

Uber Geek

Trusted

  #1563558 1-Jun-2016 11:02
Send private message

chimera:

 

davidcole: So if the vm is connected to the same NIC as the host and other vms - should I just be able to connect the lot to the mirroring port (physically) and in the Linux machine just tell it to start collecting?

Or do I need to make some virtual vlans etc and give the Linux Machine two nics .

 

If you had a physical machine connected direct to the mirror port, then it would be easy as - you'd just start packet capture with whatever software you're using and away you go.

 

You didn't mention which hypervisor you're running - I'll assume VMWare ESXi...  because you're running a VM and that VM is on a virtual switch, then you will need to enable promiscuous mode on the vSwitch/PG (because with promiscuous mode disabled, then by default the VM will only receive traffic that's destined for it)  

 

 

 

 

Yeah I'm beginning to think that.  Would a Raspberry pi be fast enough to deal with the packets from a gigabit switch?

 

BTW using Hyper-V.  There seems to be a bit of mirroring information for it.  But it's getting ot the too hard basket

 

 





Previously known as psycik

OpenHAB: Gigabyte AMD A8 BrixOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Xiaomi Humidity and Temperature sensors and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 10
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


chimera
431 posts

Ultimate Geek


  #1563561 1-Jun-2016 11:09
Send private message

davidcole:

 

chimera:

 

davidcole: So if the vm is connected to the same NIC as the host and other vms - should I just be able to connect the lot to the mirroring port (physically) and in the Linux machine just tell it to start collecting?

Or do I need to make some virtual vlans etc and give the Linux Machine two nics .

 

If you had a physical machine connected direct to the mirror port, then it would be easy as - you'd just start packet capture with whatever software you're using and away you go.

 

You didn't mention which hypervisor you're running - I'll assume VMWare ESXi...  because you're running a VM and that VM is on a virtual switch, then you will need to enable promiscuous mode on the vSwitch/PG (because with promiscuous mode disabled, then by default the VM will only receive traffic that's destined for it)  

 

 

 

 

Yeah I'm beginning to think that.  Would a Raspberry pi be fast enough to deal with the packets from a gigabit switch?

 

BTW using Hyper-V.  There seems to be a bit of mirroring information for it.  But it's getting ot the too hard basket

 

 

 

 

*ugh* Hyper-V... 

 

It sounds like you're more familiar with Windows?  Go and install a Windows VM and download and run Wireshark and play around with that combo.  Its an easier tool to learn packet structures with.

 

Cheers

 

 





 

 


Decal
183 posts

Master Geek

Subscriber

  #1563571 1-Jun-2016 11:21
Send private message

If you want to a break down of the applications and URLs. You can use PRTG which has a packet sniffer feature and gives you a visual break down of the traffic. The computer/VM running the PRTG sniffer will require 2 NICs, 1 to plug into the Mirrored port and the other for management.


davidcole

4977 posts

Uber Geek

Trusted

  #1563575 1-Jun-2016 11:31
Send private message

Decal:

 

If you want to a break down of the applications and URLs. You can use PRTG which has a packet sniffer feature and gives you a visual break down of the traffic. The computer/VM running the PRTG sniffer will require 2 NICs, 1 to plug into the Mirrored port and the other for management.

 

 

Yeah I figured it would need two nics....so I guess the next question is more hyper-v (or you can relate to vmware if you want), if the host has 2 nics....both are connected to the switch, 1 to a normal port, and the other to the mirroring port.  Is the NIC connected to the mirroring port now useless for any traffic by what will be passed to the VM for monitoring?  Or does it just act like a normal port?





Previously known as psycik

OpenHAB: Gigabyte AMD A8 BrixOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Xiaomi Humidity and Temperature sensors and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 10
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


 
 
 
 


Decal
183 posts

Master Geek

Subscriber

  #1563642 1-Jun-2016 13:31
Send private message

davidcole:

 

Decal:

 

If you want to a break down of the applications and URLs. You can use PRTG which has a packet sniffer feature and gives you a visual break down of the traffic. The computer/VM running the PRTG sniffer will require 2 NICs, 1 to plug into the Mirrored port and the other for management.

 

 

Yeah I figured it would need two nics....so I guess the next question is more hyper-v (or you can relate to vmware if you want), if the host has 2 nics....both are connected to the switch, 1 to a normal port, and the other to the mirroring port.  Is the NIC connected to the mirroring port now useless for any traffic by what will be passed to the VM for monitoring?  Or does it just act like a normal port?

 

 

 

 

It will only be able to be used to monitor the traffic. From memory with Hyper v I think you can create a v switch that can include that physical port and then at the VMs second vNIC to that vswitch and it should receive all the traffic. You will probably need to enable promiscuous mode (Cant remember if Hyper-V has this/ if it does what its called).


Create new topic





News »

Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32


NordVPN starts deploying colocated servers
Posted 7-Oct-2020 09:00


Google introduces Nest Wifi routers in New Zealand
Posted 7-Oct-2020 05:00


Orcon to bundle Google Nest Wifi router with new accounts
Posted 7-Oct-2020 05:00


Epay and Centrapay partner to create digital gift cards
Posted 2-Oct-2020 17:34


Inseego launches 5G MiFi M2000 mobile hotspot
Posted 2-Oct-2020 14:53









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.