Those users that are installing the FlowSensor 5.9 VMware virtual appliance might notice a special "Internal" VM container in the list of virtual machines monitored by the FlowSensor. Depending on what you have configured in Infrastructure Client this VM might show up as "Management Network" (the VMware default), "Service Console", or even "VMkernel".
The "VMkernel" represents the actual IP interface to the VMware ESX host itself. Tracking bandwidth to / from this logical interface is important as VMotion events are often (mistakingly?) sourced from this logical interface to ESX.
In StealthWatch you can view bandwidth, top talkers, flows, etc for the VMkernel port by drilling down into the "VM Servers" node in the SMC UI. The screenshot below show the VMkernel "Management Network" in Infrastructure Client and then the same object (made clickable) in the StealthWatch SMC enterprise tree...
Comments