Flows traversing an NSX Edge node are not present in VCF Operations for Networks.

Products

• VCF Operations for Networks

Issue/Introduction

When querying traffic that traverses an NSX Edge node, particularly those flows destined for an NSX LB VIP, no results are returned.

Environment

VCF Operations for Networks

Aria Operations for Networks

VMware NSX

Cause

VCF Operations for Networks (formerly AON) does not collect data traffic from an NSX Edge node's data path (fp-ethX) interfaces; it only collects management (eth0) traffic. Consequently, search queries will return no results if they filter by the NSX LB VIP, or if they use the IP address of a backend server that is either on the physical network or lacks NetFlow/IPFIX collection.

Resolution

This behavior is expected. If the traffic you are analyzing is destined for backend pool members that have NetFlow/IPFIX collection enabled, you can follow the procedure detailed in Broadcom KB 438909 to track these flows.