Need to be able to track packets to specific ports across several machines for auditing and we use Zabbix everywhere. We need this in Zabbix. We need it by port because that is how we are currently segmenting our data.

There is a mix of RHEL6 and RHEL7 machines, so I don't want to try and do iptables / firewalld counters for this.

I have a feeling I might need to break this traffic out to separate sub/virtual interfaces and track it that way with Zabbix. Is there any plan to be able to do this outside of looking at an interface? Also, are there any issues with monitoring sub interfaces?