海运的博客

XenServer5.6下编写，用于获取所有VM虚拟机IP和对应MAC地址，Shell脚本如下：

#!/bin/bash
#https://www.haiyun.me
if [[ ! -e mac-ip.txt ]];
then
        touch mac-ip.txt
else
        > mac-ip.txt
fi
for vps in `xe vm-list |awk '/name/ {print $4}'`
do
        case $vps in
                *"Control"* ) continue ;;
        esac
        writeline=`xe vif-list vm-name-label=$vps params=MAC|awk '/MAC/ {print $5}'`
        writeline+=" "
        writeline+=`xe vm-list name-label=$vps params=networks|awk '/network/ {print $5}'`
        echo $writeline >> mac-ip.txt
done

XenServer获取VM虚拟机名称与MAC地址参考：https://www.haiyun.me/archives/xenserver-vmname-mac.html。

XenServer5.6测试通过，用于查找所有VM及其对应MAC地址写入output.csv文件，直接下载shell脚本。

#!/bin/bash
#https://www.haiyun.me
if [ $(whoami) != 'root' ];
then
    echo "Must be root to run $0"
    exit 1;
fi

if [[ ! -e output.csv ]];
then
    touch output.csv
else
    > output.csv
fi

for vmuuid in `xe vm-list | awk -F ':'  '/^uuid/ {print $2}'` ;
do
    namelabel=`xe vm-param-get uuid=$vmuuid param-name=name-label`
    case $namelabel in
        *"Control domain"* ) continue ;;
    esac
    i=`xe vif-list vm-name-label="$namelabel" | grep device | wc -l`
    writeline="\"$namelabel\""
    writeline+=","
    for ((j=0;j<$i;j++))
    do
        mac=`xe vif-list vm-name-label="$namelabel" params=MAC device=$j | awk -F': ' '/^MAC/ {print $2}'`
        if [ -z "$mac" ]
        then
            i=`expr $i + 1`
            continue
        else
            writeline+=$mac
        fi
        if [ $j -lt `expr $i - 1` ]
        then
            writeline+=","
        fi
    done
    echo "$writeline" >> output.csv
done
echo "VMs and their respective MAC addresses have been written to output.csv in the current directory."
exit 0

服务器端安装Host sFlow Agent代理客户端，用作发送sFlow数据到sFlowTrend分析端，支持多种Windows/Linux/Uinx系统。
Host sFlow下载地址：http://host-sflow.sourceforge.net/
sFlowTrend下载地址：http://www.inmon.com/products/sFlowTrend.php
XenServer6可直接安装Host sFlow，XenServer5要先配置为Open vSwitch模式支持sFlow。

wget http://downloads.sourceforge.net/project/host-sflow/REL-1_22/hsflowd_XenServer_56FP2-1.22.2-1.i386.rpm
rpm -ivh hsflowd_XenServer_56FP2-1.22.2-1.i386.rpm 

配置Host sFlow：

cat /etc/hsflowd.conf 
#https://www.haiyun.me
sflow {
  DNSSD = off
  polling = 20
  sampling = 512
collector {
  ip = 192.168.1.155
  udpport = 6343
   }
}

启动Host sFlow Agent：

/etc/init.d/hsflowd start

然后在sFlowTrend配置代理端，不久即可看到监控的数据：


分析XenServer虚拟交换机sFlow数据：

ovs-vsctl -- --id=@sflow create sflow agent=xenbr0 targe=\"192.168.1.155:6343\" header=128 sampling=512 polling=30 \
-- set bridge eth0 sflow=@sflow

新安装的XenServer6默认为Open vSwitch，XenServer5.6默认为网桥模式，查看当前网络模式：

cat /etc/xensource/network.conf
openvswitch

更改网络为虚拟交换机Open vSwitch模式：

#https://www.haiyun.me
xe-switch-network-backend openvswitch

切换回网桥bridge模式：

xe-switch-network-backend bridge

配置虚拟交换机输出NetFlow数据到分析端，可参考：Linux下Nfsen和Nfdump配置Netflow分析端。

ovs-vsctl -- --id=@netflow create netflow targe=\"192.168.1.5:9995\" active_timeout=30 \
-- set bridge xenbr0 netflow=@netflow

输出sFlow数据：

ovs-vsctl -- --id=@sflow create sflow agent=eth1 targe=\"192.168.1.5:9995\" header=128 sampling=512 polling=30 \
-- set bridge xenbr0 sflow=@sflow

查看是否有NetFlow数据输出：

tcpdump -nn port 9995
tcpdump: WARNING: eth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
18:12:16.535132 IP 192.168.1.15.55104 > 192.168.1.3.9995: UDP, length 600
18:12:17.544569 IP 192.168.1.15.55104 > 192.168.1.3.9995: UDP, length 216

更改Netflow或sFlow参数：

ovs-vsctl set NetFlow xenbr0  targe=\"192.168.1.3:9995\"

查看Netflow或sFlow列表：

ovs-vsctl list netflow/sflow

删除Netflow/sFlow：

ovs-vsctl remove bridge xenbr0 netflow/sflow <uuid>

据说Open vSwitch模式在XenServer下并不稳定，只为输出NetFlow可使用Fprobe。