Host Monitoring

You can use Application Telemetry to get better visibility for a selected host by performing a timed packet capture for both incoming and outgoing traffic specific to that host. Initiate the packet capture (PCAP) from Extreme Management Center and specify a source or destination IP address to match. Extreme Management Center pushes an additional rule to the Application Telemetry agent on the switch, which captures packets that match this rule and uses the existing ERSPAN GRE session to mirror these packets to Analytics Engine for analysis.

To use this feature, all configuration occurs in Extreme Management Center. The following prerequisites for configuration must be met:

• Application Telemetry is active.

• The Analytics Engine records application flows.

• You can see the flows in Extreme Management Center.

In Extreme Management Center, select a flow and configure packet capture. You can specify the host, either the originating or destination host for the flow, and a monitoring interval. For more information about how to configure packet capture in Extreme Management Center, see the Extreme Management Center documentation.

The following list identifies restrictions specific to host monitoring:

• You cannot configure monitoring of the same host twice.

• Host monitoring shares resources with the filter ACL application. The maximum number of hosts that can be monitored depends on the number of ACEs you configure. If no resources are available, the Resource Manager generates an error for both applications.

• You cannot configure monitoring of the sFlow agent IP address or collector IP address.

Although you use Extreme Management Center to configure the packet capture, the switch logs a message when this feature is activated or deactivated. Configuration of host monitoring is not saved; the monitoring is time-based.