Often, for troubleshooting or auditing purposes, the network traffic has to be mirrored to a remote collector. The most common solution is to use the NetFlow protocol, which collects the IP traffic as records and sends them to the remote server for analysis.
In vSphere 5, NetFlow Version 10 is supported by vSphere Distributed Switch. vSphere Distributed Switch requires the Enterprise Plus license.
Traffic which can be collected includes the following:
VM-to-VM traffic within one host
VM-to-VM traffic between hosts
VM to physical network traffic
