The Edge Intelligence crawler updates its application flow patterns using the information collected from the span port. Therefore, it is crucial to accurately configure the Port Mirroring settings in vSphere to direct data traffic patterns to the Virtual Crawler's SPAN port (eth1)

Configuring Port Mirroring

  1. Log in to vSphere Client.

  2. In the vSphere Client, navigate to the distributed switch you wish to configure for port mirroring.

  3. Click the 'Configure' tab and expand Settings.

  4. Select the Port mirroring option and click New.

  5. Select the 'Remote Port Mirroring Destination' session type which mirrors packets from select VLANs to distributed port(s).

    Figure 1. Remote Mirroring Destination Port Mirror session
  6. Click Next.

  7. To continue creating a port mirroring session, specify the name, description, and session details for the new port mirroring session:
    1. Specify unique name for the port mirroring session.

    2. Set Status to Enable.

    3. Set Normal I/O on destination ports to disabled.

    4. Set sampling rate to 1 (every packet mirrored).

      Figure 2. Port Mirror Properties
  8. Click Next.

  9. To continue creating a port mirroring session, specify the source VLANs from which traffic will be mirrored by clicking the 'Add' button.

    Figure 3. Source VLANs
  10. Click Next.

  11. To complete the creation of a port mirroring session, select the destination port that matches Crawler VM eth1 interface by locating Crawler's VM name (Connected Entity) and SPAN portgroup created as part of the pre-requisites configuration.

    Figure 4. Destination Port
  12. Click Next to complete Port Mirroring configuration.