Host Monitoring

You can use Application Telemetry to get better visibility for a selected host by performing a timed packet capture for both incoming and outgoing traffic specific to that host. Initiate the packet capture (PCAP) from ExtremeCloud IQ ‑ Site Engine and specify a source or destination IP address to match. ExtremeCloud IQ ‑ Site Engine pushes an additional rule to the Application Telemetry agent on the switch, which captures packets that match this rule and uses the existing ERSPAN GRE session to mirror these packets to Analytics Engine for analysis.

To use this feature, all configuration occurs in ExtremeCloud IQ ‑ Site Engine. The following prerequisites for configuration must be met:

• Application Telemetry is active.

• The Analytics Engine records application flows.

• You can see the flows in ExtremeCloud IQ ‑ Site Engine.

In ExtremeCloud IQ ‑ Site Engine, select a flow and configure packet capture. You can specify the host, either the originating or destination host for the flow, and a monitoring interval. For more information about how to configure packet capture in ExtremeCloud IQ ‑ Site Engine, see the ExtremeCloud IQ ‑ Site Engine documentation.

The following list identifies restrictions specific to host monitoring:

• You cannot configure monitoring of the same host twice.

• Host monitoring shares resources with the filter ACL application. The maximum number of hosts that can be monitored depends on the number of ACEs you configure. If no resources are available, the Resource Manager generates an error for both applications.

• You cannot configure monitoring of the sFlow agent IP address or collector IP address.

Although you use ExtremeCloud IQ ‑ Site Engine to configure the packet capture, the switch logs a message when this feature is activated or deactivated. Configuration of host monitoring is not saved; the monitoring is time-based.