In VCF Operations for Networks not able to see traffic on particular ports due to flows showing broad range of ports

Products

• VCF Operations for Networks

Issue/Introduction

• By default, VCF Operations for Networks summarises destination port information for aggregated flows into a broad range. As some users may require more granular detail, this feature can be disabled if necessary. Here's an example of aggregated flow with grouped port information in AON:

Environment

VMware VCF Operations for Networks

Resolution

To disable port aggregation for all ports:

1. SSH to collector VM, change the user to ubuntu (ub) and open the configuration file:
   
   /home/ubuntu/build-target/nfdump/ipfix.configuration
   
   
2. In the commonConfig section, add the following line
   
   noAggThreshold: 65536 
forceAggThreshold: 65536
   
   

3. Restart flow-processor 
   
   sudo service flow-processor stop 
sudo service flow-processor start

Screenshot for Reference:
   
   

 

To enable port aggregation for all ports:

1. Open the configuration file
   
   /home/ubuntu/build-target/nfdump/ipfix.configuration
   
   In the commonConfig section, remove the below lines
   
   noAggThreshold: 65536

   forceAggThreshold: 65536
   
   

2. Restart flow-processor
   
   sudo service flow-processor stop 
sudo service flow-processor start