ESX Netflow Interface

[ponchodesarolla]

Hello,

I'm trying to find a way to match the ESX netflow interface number to an intuitive device. For example my vswitch is connected to 5 VMs and one physical interface (vmnic0), plus the service console (vswif0). Is there anything I can access (either programatically, or via snmp, or otherwise) that I would be able to use to map the interface numbers I am receiving from netflow to those vms or ports?

For example, in netflow analyser I get the following interfaces (VMX is the VM host): vmx:1 vmx:4 vmx:5 vmx:6 vmx:9 vmx:12 vmx:13 vmx:14 vmx:17 vmx:21 .... vmx:29 vmx:31. I would like to be able to have a script to label those VMNIC0, VM1, VM2, etc. by getting some info from VM host to correlate the interfaces.

From SNMP I found some useful information:

ifaddr => .1.3.6.1.4.1.6876.3.4.1.4

netname => .1.3.6.1.4.1.6876.3.4.1.2

pktstx => .1.3.6.1.4.1.6876.3.4.1.6

kbtx => .1.3.6.1.4.1.6876.3.4.1.7

vmid => .1.3.6.1.4.1.6876.3.4.1.7

dispname => .1.3.6.1.4.1.6876.2.1.1.2

netvmid => .1.3.6.1.4.1.6876.3.4.1.3

index => .1.3.6.1.4.1.6876.3.4.1.1

pktsrx => .1.3.6.1.4.1.6876.3.4.1.8

kbrx => .1.3.6.1.4.1.6876.3.4.1.9

But I still can't correlate to the netflow inteface numbers...

Can anyone please help... Thank you...

[kjb007]

Have you seen http://www.vmware.com/pdf/vi3_35_25_netflow.pdf ? It has an alternative method to tag ports/interfaces. It may be what you are looking for.

-KjB

VMware vExpert

[ponchodesarolla]

Thanks for the reply, unfortunately that alternate method only is usefull if you have multiple virtual switches, and want to ensure unique port/interface numbers across all vswitches. It still does not give a mapping of interface # to VM.

Cheers.