A hardware tap becomes more and more meaningless in modern SDN networks behind dynamic virtualisation platforms. Sure, you can find out where your VM is curren

A hardware tap becomes more and more meaningless in modern SDN networks behind dynamic virtualisation platforms. Sure, you can find out where your VM is currently physically hosted, then tap the 4x10Gbit that come out of that hypervisor. Your network stream is probably somewhere in there. But it is mixed with a lot of other data, and you could miss the bits that go directly to other VMs on the same hypervisor. Also it is encapsulated, split up in multiple streams, multiple virtual networks etc. If the VMs is moved (for load-balancing or maintenance or whatever reason) your tap becomes useless and you have to chase your VM.