Deploying a probe on a virtual machine – H3C Technologies H3C Intelligent Management Center User Manual

Page 364

Advertising
background image

354

After a probe server has been added to an NTA server as a probe, and the probe has been

selected on the Server Management page, the NTA server is ready to begin processing data from
the probe server/probe. Probe traffic analysis tasks instruct NTA to begin processing probe server

data based on the task configuration. For more information on selecting a probe in the NTA server

configuration, see "

Managing NTA servers

," specifically "

Modifying an NTA server

configuration

."

4.

Configure probe traffic analysis tasks.
Probe traffic analysis tasks analyze network flow data for the probes you specify. NTA parses all

network flow data and provides statistical views of traffic received by the probes configured in a
probe traffic analysis task. For example, NTA provides source and destination host information

reporting by probe, displaying traffic for source or destination hosts that sent or received traffic

from the locations where the probes were deployed. For instructions on how to configure probe

traffic analysis tasks, see "

6 Probe monitoring

."

Deploying a probe on a virtual machine

The network shown in

Figure 235

provides four virtual machines: WWW, BBS, Database, and Probe.

WWW and BBS are web servers, Database is a database server, and Probe is a probe server. Network

adapter eth0 for virtual machines WWW, BBS, and Database provides external services and is added
to port group 1. Network adapter eth1 is used for network management and is added to port group 2.

Probe adds network adapter eth0 to port group 1 and network adapter eth1 to port group 2.
After you configure port group 1 to operate in promiscuous mode, network adapter eth0 for Probe can

capture the network traffic transmitted between users and the WWW/BBS server, and can capture the
network traffic transmitted between the WWW or BBS server and the database server. Probe can use

network adapter eth1 to send the collected traffic to the NTA server.

Figure 235 Deploying a probe on a virtual machine

To deploy a probe on a virtual machine:

1.

On a physical server, use the New Virtual Machine wizard to create virtual machines.

Advertising