Native Traffic Mirroring
Enjoy native traffic mirroring from Amazon AWS, Microsoft Azure and Google clouds. Receive raw network packets by using VxLAN tunnelling from a virtual interface to Flowmon. This data is processed by Flowmon Probes that extract network telemetry data from L2-L7 (IPFIX) and full packets.
Virtual TAP mirrors traffic to the monitoring ports of Flowmon Collector (a built-in feature to generate IPFIX/NetFlow). Some 3rd party agents also provide IPFIX data directly instead of raw network traffic. Flowmon supports vTaps from major vendors such as IXIA, Gigamon and Nubeva.
ERSPAN/GRE works in a similar way to port mirroring over L3. It provides a copy of network traffic to Flowmon Probe. This approach is employed by customers who use 3rd party infrastructure components such as VMware VDS switch, Cisco CSR 1000V rather than native ones.
The native cloud feature provides CSV/JSON log files with a similar content like NetFlow v5 that has information used to reconstruct traffic charts and other information. Supported format is AWS VPC FlowLogs.