I am looking to run NTOP NG Pro edition but i am thinking of virtualizing the host instead of a dedicated machine for now. The problem is that i don’t know if its possible to do a port mirror to a virtual machine. Is this even possible?
edit: My Xen server doesn’t have a spare NIC i can pass through which I’m thinking is probably the only way.
You can port mirror to a virtual machine, yes. Pass through is one way, tagging the mirrored traffic and routing that VLAN to your VM is another.
What kind of traffic are you looking to monitor? Does your existing Xen server NIC has enough spare bandwidth to accomodate the mirrored traffic?
My idea is to get Internet traffic port mirrored to my NTOP-NG instance.
There is more than enough bandwidth available on the NIC that i have in mind.