topic RE: Oneview/Purview application response times missing in ExtremeCloud IQ- Site Engine Management Center

Oneview/Purview application response times missing

mp2014 — Sun, 08 Feb 2015 18:02:00 GMT

Hi,

i see no network or applications response times in Purview/Oneview, what to check in my configuration?

RE: Oneview/Purview application response times missing

KeN_Chung — Sun, 08 Feb 2015 19:34:00 GMT

I also deployed purview in HK customer site. Just see the application flows, but none matched with application group. I already enforcers application on configuration tab from netsight.

RE: Oneview/Purview application response times missing

mp2014 — Sun, 08 Feb 2015 19:42:00 GMT

I think if you see just the flows - that just means it sees netflow data. For application detection you need to give the appliance some more data from a coreflow2 device via port mirror or policy mirror.
In my case (just a quick test with standard nms-adv license) i use policy mirror + gre tunnel, works fine - just missing the response times.

RE: Oneview/Purview application response times missing

KeN_Chung — Mon, 09 Feb 2015 07:52:00 GMT

Can you post your configuration of coreflow2 device and purview? I already enabled Netflow, policy mirror and port mirror, but didn't use GRE tunnel.

RE: Oneview/Purview application response times missing

dflouret — Mon, 09 Feb 2015 07:52:00 GMT

KeN, Here's a configuration for an SSA switch that connects to the Purview engine configured in Deployment Mode 2 2. Dual Interface Mirrored Separate interfaces are configured for management and monitoring traffic. The monitoring interface will be put into tap mode for traffic monitoring. The switch sends NetFlow information through port ge.1.2 and packet information through port ge.1.17. No GRE tunnels configured here so ge.1.17 must be directly connected to eth2 port in the Purview appliance.

Here's a diagram. Sorry, the legends are in spanish...

The commands to configure this are:
set vlan create 100,1111-1112 clear vlan egress 1 lag.0.1-62;tbp.0.1-62;ge.1.1-48;tg.1.1-4 set vlan egress 100 ge.1.1-16 untagged
set vlan egress 1111 ge.1.17 untagged set vlan egress 1112 ge.1.48 untagged set ip interface vlan.0.100 default set ip address 192.168.100.1 mask 255.255.255.0 interface vlan.0.100 set port vlan ge.1.1-16 100 modify-egress set port vlan ge.1.17 1111 modify-egress set port vlan ge.1.48 1112 modify-egress set prompt PoC-SSA set cdp status disable set ciscodp status disable set gvrp disable set lacp disable set mirror create 1 set mirror 1 mirrorN 15 set mirror ports ge.1.17 1 set netflow export-interval 1 set netflow export-destination 192.168.100.20 2055 set netflow export-version 9 set netflow export-rate 20000 1 set netflow export-data enable mac set netflow export-data enable vlan set netflow port ge.1.48 enable rx set netflow template refresh-rate 30 timeout 1 set netflow cache enable
set policy profile 1 name Purview pvid-status enable pvid 0 mirror-destination 1 set policy rule admin-profile port ge.1.48 mask 16 port-string ge.1.48 admin-pid 1 set spantree portadmin ge.1.1-17,48 disable
set ssh enabled set telnet disable inbound set telnet disable outbound

RE: Oneview/Purview application response times missing

dflouret — Mon, 09 Feb 2015 07:52:00 GMT

Forgot to mention that this config assumes mirrored traffic to be analyzed is fed into the SSA through port ge.1.48.

RE: Oneview/Purview application response times missing

mp2014 — Mon, 09 Feb 2015 07:52:00 GMT

i setup a purview appliance with 1 interface in VMWare, using GRE Tunnel for mirrored traffic. If you use policy manager, configure a rule/mirror there.

# tg.2.24 is an unused dummy port
set mirror create 1
set mirror 1 mirrorN 15
set mirror ports tg.2.24 1

# tg.2.15 is the port with the traffic that should be mirrored
set policy profile 9 name PurviewMirror pvid-status enable pvid 4095 mirror-destination 1
set policy rule admin-profile port tg.2.15 mask 16 port-string tg.2.15 admin-pid 9

# GRE Tunnel
# 10.10.10.1 - routable address
# gre tunnel set on the "dummy" port tg.2.24
# x.x.x.x your purview appliance
interface loop.0.1
ip address 10.10.10.1 255.255.255.255 primary
no shutdown
exit
interface tun.0.1
tunnel destination x.x.x.x
tunnel mode gre l2 tg.2.24
tunnel mirror enable
tunnel source 10.10.10.1
no shutdown
exit

then configure the gre endpoint at the purview appliance (specify source 10.10.10.1)

This example is almost from "purview deployment guide". There you can find various implementation options.

RE: Oneview/Purview application response times missing

KeN_Chung — Mon, 09 Feb 2015 07:52:00 GMT

Thanks, all. I can see traffic flows with application groups and respone times shown.

RE: Oneview/Purview application response times missing

dflouret — Mon, 09 Feb 2015 07:52:00 GMT

Good!

RE: Oneview/Purview application response times missing

mp2014 — Mon, 09 Feb 2015 07:52:00 GMT

for my case...i still dont see any response times. I doubt its all at 0ms.

RE: Oneview/Purview application response times missing

mp2014 — Mon, 09 Feb 2015 07:52:00 GMT

any idea why I see no network or application response times? All other data is fine...

RE: Oneview/Purview application response times missing

mp2014 — Thu, 26 Feb 2015 22:52:00 GMT

Hi,

I just checked the onboard netflow collector of netsight. I dont see any response times for these flows neither. Maybe a general problem with my netsight installation?
Should response times get collected for any flow? I double checked documentation and dont see any advise that I have to enable something to get these data...

RE: Oneview/Purview application response times missing

mp2014 — Thu, 26 Feb 2015 22:52:00 GMT

yes, the gre tunnel is working, and data is collected - just the response times are missing

RE: Oneview/Purview application response times missing

Nico_Willamowsk — Mon, 09 Mar 2015 22:21:00 GMT

Do you have a Virtual or Hardware Purview Appliance?

RE: Oneview/Purview application response times missing

Nico_Willamowsk — Tue, 10 Mar 2015 14:20:00 GMT

In VM Ware it´s necessary to configure the Port Group for mirroring specially. The Promiscuous Mode had to be "Accepted" and the VLAN Type had to be "VLAN-Trunking" In the VLAN Area you have to be defined the VLAN "0-4094". So you can mirror tagged and untagged traffic and you will see Network and application Response Time. In our Installation with a virtual purview appliance the missing VLAN type and vlan Definition 0-4094 resolved the Problem.

RE: Oneview/Purview application response times missing

mp2014 — Tue, 10 Mar 2015 16:37:00 GMT

Hi,
its a virtual appliance, the vmware specific configuration options are in place but we didnt set for vlan 0-4096. I'll try this...

RE: Oneview/Purview application response times missing

Nico_Willamowsk — Tue, 10 Mar 2015 16:44:00 GMT

Okay, in our case it just take some minutes. Then we saw application and Network Response time.

RE: Oneview/Purview application response times missing

Rex_Kong — Tue, 17 Mar 2015 10:09:00 GMT

I also experienced the same issue. After changing the VM port group VLAN ID from 0(default) to 4095, I could see the network and application response time.

RE: Oneview/Purview application response times missing

mp2014 — Tue, 17 Mar 2015 10:09:00 GMT

what purview deployment mode you run? i use "single interface" for management + the gre tunnel for mirroring. If i change the vlan id management will be affected

RE: Oneview/Purview application response times missing

Rex_Kong — Tue, 17 Mar 2015 10:09:00 GMT

The purview deployment mode was in overlay mode with a purview engine(virtual appliance) of 2 interfaces, i.e. eth0 for management, eth1 for monitoring mirrored netflow traffic from a purview sensor(CoreFlow2 switch). I changed the VM port group(eth1) VLAN ID from 0 to 4095.