Contents

NetStream commands· 1

display ip netstream cache· 1

display ip netstream export 6

display ip netstream template· 7

enable· 10

ip netstream·· 11

ip netstream aggregation· 11

ip netstream export host 13

ip netstream export rate· 14

ip netstream export source· 15

ip netstream export template refresh-rate· 16

ip netstream export version· 17

ip netstream filter 18

ip netstream sampler 19

ip netstream timeout active· 20

ip netstream timeout inactive· 20

netstream key· 21

reset ip netstream statistics· 22

snmp-agent trap enable ip netstream·· 23

Session-based NetStream commands· 24

display session-based netstream aggregation-cache· 24

session-based netstream enable· 25

session-based netstream export host 26

session-based netstream export source ip· 27

 

NetStream commands

MDC is supported only when the device operates in standalone mode. For more information about standalone mode, see IRF configuration in Virtual Technologies Configuration Guide. For more information about MDC and device models that support MDC, see MDC configuration in Virtual Technologies Configuration Guide.

display ip netstream cache

Use display ip netstream cache to display NetStream entry information.

Syntax

In standalone mode:

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 } ] [ destination destination-ip | interface interface-type interface-number | source source-ip ] * [ slot slot-number ]

In IRF mode:

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 } ] [ destination destination-ip | interface interface-type interface-number | source source-ip ] * [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

verbose: Displays detailed information about NetStream entries. If you do not specify this keyword, this command displays brief information about NetStream entries.

type: Specifies the NetStream entry type. If you do not specify this keyword, this commands displays information about all types of NetStream entries.

ip: Specifies Layer 3 NetStream entries.

ipl2: Specifies Layer 2 and Layer 3 NetStream entries.

l2: Specifies Layer 2 NetStream entries.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

interface interface-type interface-number: Specifies an interface by its type and number.

source source-ip: Specifies a source IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information about NetStream entries for all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information about NetStream entries for all cards. (In IRF mode.)

Usage guidelines

The types of NetStream entries for flow packets vary by the export template version and whether the flow packets contain IP headers.

·     If the version 9 or version 10 template is used:

¡     The type of the NetStream entry is ipl2 (Layer 2 and Layer 3) for flow packets containing IP headers.

¡     The type of the Netstream entry is l2 (Layer 2) for flow packets without IP headers.

·     If the version 5 template is used:

¡     The type of the NetStream entry is ip (Layer 3) for flow packets containing IP headers.

¡     The type of the NetStream entry is l2 (Layer 2) for flow packets without IP headers.

Examples

# Display detailed information about NetStream entries.

<Sysname> display ip netstream cache verbose

IP NetStream cache information:

  Active flow timeout             : 5 min

  Inactive flow timeout           : 10 sec

  Max number of entries           : 16384

  IP active flow entries          : 1

  MPLS active flow entries        : 0

  L2 active flow entries          : 1

  IPL2 active flow entries        : 1

  IP flow entries counted         : 10

  MPLS flow entries counted       : 0

  L2 flow entries counted         : 10

  IPL2 flow entries counted       : 20

  Last statistics resetting time  : 01/01/2019 at 00:01:02

 

IP packet size distribution (1103746 packets in total):

1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480

.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

 

 512  544  576 1024 1536 2048 2560 3072 3584 4096 4608 >4608

.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000

 

Protocol          Total Packets    Flows  Packets Active(sec) Idle(sec)

                  Flows /sec       /sec   /flow   /flow       /flow

--------------------------------------------------------------------------

TCP-Telnet      2656855     372        4       86          49        27

TCP-FTP         5900082      86        9        9          11        33

TCP-FTPD        3200453    1006        5      193          45        33

TCP-WWW       546778274   11170      887       12           8        32

TCP-other      49148540    3752       79       47          30        32

UDP-DNS       117240379     570      190        3           7        34

UDP-other      45502422    2272       73       30           8        37

ICMP           14837957     125       24        5          12        34

IP-other          77406       5        0       47          52        27

 

Type DstIP(Port)         SrcIP(Port)            Pro ToS VNI   If(Direct)  Pkts

     DstMAC(VLAN)        SrcMAC(VLAN)

     TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP   11.1.1.1(1024)      11.1.1.2(21)           6   128 10    XGE3/0/1(I)  42996

     TCPFlag:      27

     DstMask:      24       SrcMask:      24       NextHop:      0.0.0.0

     DstAS:         0       SrcAS:         0       BGPNextHop:   0.0.0.0

     InVRF:        10

     SamplerMode:   2       SamplerInt:  256

     Active:  120.600       Bytes/Pkt:   152

     First packet arrived: 10/28/2019, 14:10:03

     Last packet arrived:  10/28/2019, 14:21:03

L2   0012-3f86-e94c(10)     0012-3f86-e86a(0)                 XGE3/0/1(I)  42996

     SamplerMode:   2       SamplerInt:   64

     Active:    5.510       Bytes/Pkt:   210

     First packet arrived: 10/28/2019, 14:10:00

     Last packet arrived:  10/28/2019, 14:21:03

IP&  192.168.123.1(2048) 192.168.1.1(0)         1    0   N/A   XGE3/0/2(O)  42996

L2   0012-3f86-e95d(0)      0012-3f86-e116(1008)

     TCPFlag:      27

     DstMask:      24       SrcMask:      24       NextHop:    192.168.1.2

     DstAS:         0       SrcAS:         0       BGPNextHop: 0.0.0.0

     OutVRF:        0       TCPFlag:    0

     SamplerMode:   0       SamplerInt:    0

     Active:   12.030       Bytes/Pkt:    86

     First packet arrived: 10/28/2019, 14:10:04

     Last packet arrived:  10/28/2019, 14:21:03

IP&  172.16.1.1(68)      172.16.2.1(67)         17  64   N/A   XGE3/0/3(O)  42996

Table 1 Command output

Field	Description
Active flow timeout	Aging timer for active flows, in minutes.
Inactive flow timeout	Aging timer for inactive flows, in seconds.
Max number of entries	Maximum number of flows allowed in the cache.
IP active flow entries	Number of active IP flows in the cache.
MPLS active flow entries	This field is not supported in the current software version. Number of active MPLS flows in the cache.
L2 active flow entries	Number of active Layer 2 flows in the cache.
IPL2 active flow entries	Number of active Layer 2 and Layer 3 flows in the cache.
IP flow entries counted	Number of IP flows that have been counted.
MPLS flow entries counted	This field is not supported in the current software version. Number of MPLS flows that have been counted.
L2 flow entries counted	Number of Layer 2 flows that have been counted.
IPL2 flow entries counted	Number of Layer 2 and Layer 3 flows that have been counted.
Last statistics resetting time	Last time the reset ip netstream statistics command was executed. This field displays Never if you have never executed this command.
IP packet size distribution (1103746 packets in total)	Distribution of IP packets by packet size, and the bracketed number is the total number of IP packets. The value is displayed in the proportion of the number of IP packets of the specified sizes to the total number of IP packets, and the value is displayed with 3 decimal places.
1-32   64   96  128  160  192  224  256  288 320  352  384  416  448  480 512  544  576 1024 1536 2048 2560 3072 3584 4096 4608	This field is not supported in the current software version. Range of IP packet length (excluding data link layer header) in bytes. ·     For the values in the range of 1 to 576, the range increases in the step of 32. For example, 1-32 shows the number of packets with the size of 1 to 32 bytes. 64 shows the number of packets with the size of 33 to 64 bytes. ·     For the values greater than 1024, the range increases in the step of 512. For example, 1536 shows the number of packets with the size of 1025 to 1536 bytes. ·     Packets with the size of 577 to 1024 bytes are recorded in the 1024 entry.
Protocol     Total Flows     Packets /sec Flows/sec   Packets/flow Active(sec)/flow     Idle(sec)/flow	Statistics of packets by protocol type: ·     Protocol type. ·     Total number of flows. ·     Number of packets per second. ·     Number of flows per second. ·     Number of packets per flow. ·     Active time (in seconds) of each flow. ·     Inactive time (in seconds) of each flow.
Type DstIP(Port)            SrcIP(Port)            Pro ToS VNI If(Direct)  Pkts	Statistics of the active flows in the current cache: ·     Flow type. Flows are classified into the following types: ¡     Layer 3 flows. ¡     Layer 2 flows. ¡     Layer 2 and Layer 3 flows. ¡     MPLS flows without IP options. This type is not supported in the current software version. ¡     MPLS flows with IP options. This type is not supported in the current software version. ·     Destination IP address (destination port). ·     Source IP address (source port). ·     Protocol number. ·     (This field is not supported in the current software version.) ToS. ·     (This field is not supported in the current software version.) VXLAN ID. ·     Interface name (direction). ·     Number of packets. ICMP packets do not contain port number fields, so the type and code fields are captured. The value for the destination port represents these two fields: ·     The highest 8 bits represent the type field. ·     The lowest 8 bits represent the code field. The value for the source port is set to 0 and does not indicate any statistics.
DstMAC(VLAN)          SrcMAC(VLAN)	Layer 2 information of the active flows in the current cache: ·     Destination MAC address, followed by the destination VLAN ID in parenthesis. ·     Source MAC address, followed by the source VLAN ID in parenthesis.
TopLblType(IP/Mask)      Lbl-Exp-S-List	This field is not supported in the current software version. Information about the active MPLS flows in the current cache: ·     Type of the labels at the top of the label stack: ¡     IP address associated with the label. ¡     Mask associated with the label. ·     Label list. Up to three labels can be listed in one label list.
TCPFlag: DstMask:      SrcMask:             NextHop: DstAS:           SrcAS:            BGPNextHop: OutVRF:       InVRF: SamplerMode:                     SamplerInt: Active:       Bytes/Pkt: First packet arrived: Last packet arrived:	Other information about the active flows in the cache: ·     TCP tag. ·     Destination mask. ·     Source mask. ·     Routing next hop. ·     Destination AS. ·     Source AS. ·     BGP next hop. ·     VPN instance to which the outbound packets belong. ·     VPN instance to which the inbound packets belong. ·       ·     Sampling mode. Supported sampling modes are: ¡     0—No sampling. ¡     2—Random sampling. ·     Sampling interval. ·     Flow's active time. ·     Number of bytes per packet. ·     Arrival time of the first packet of the flow. ·     Arrival time of the last packet of the flow.

‌

display ip netstream export

Use display ip netstream export to display information about the NetStream data export.

Syntax

display ip netstream export

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

IP NetStream export information varies by aggregation mode. This command displays IP NetStream export information for all the configured aggregation modes.

Examples

# Display information about the NetStream data export.

<Sysname> display ip netstream export

IP export information:

  Flow source interface                              : Ten-GigabitEthernet3/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  5 exported flow number                    : 16

  Version  5 exported UDP datagram number (failed)   : 16 (0)

  Version  9 exported flow number                    : 20

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

 

protocol-port aggregation export information:

  Flow source interface                              : Ten-GigabitEthernet3/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  8 exported flow number                    : 16

  Version  8 exported UDP datagram number (failed)   : 2 (0)

  Version  9 exported flow number                    : 16

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

Table 2 Command output

Field	Description
IP export information	NetStream data export information.
Flow source interface	Source interface from which the NetStream data is exported.
Flow destination VPN instance	VPN to which the destination address of the NetStream data export belongs.
Flow destination IP address (UDP)	Destination IP address and UDP port number of the NetStream data export.
Version  5 exported flow number	Number of flows that are exported in version 5 format.
Version  5 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 5 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
Version  9 exported flow number	Number of flows that are exported in version 9 format.
Version  9 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 9 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
L2 export information	Statistics of the Layer 2 data export.
protocol-port aggregation export information	Statistics of NetStream protocol-port aggregation in version 8 format.
Version  8 exported flow number	Number of flows that are exported in version 8 format.
Version  8 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 8 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
Version 10 exported flow number	Number of flows that are exported in version 10 format.
Version 10 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 10 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

‌

display ip netstream template

Use display ip netstream template to display NetStream template information.

Syntax

In standalone mode:

display ip netstream template [ slot slot-number ]

In IRF mode:

display ip netstream template [ chassis chassis-number slot slot-number  ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays NetStream template information for the active MPU. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays NetStream template information for the global active MPU. (In IRF mode.)

Usage guidelines

IP NetStream templates vary by aggregation mode. This command displays IP NetStream template information for all the configured aggregation modes.

Examples

# Display NetStream template information.

<Sysname> display ip netstream template

 Flow template refresh frequency            : 20

 Flow template refresh interval             : 30 min

 Active flow templates                      : 2

 Created flow templates                     : 2

 

Protocol-port outbound template:

 Template ID                : 3258

 Field count                : 15

 Field type                   Field length (bytes)

---------------------------------------------------------------------------

 Flows                        4

 Out packets                  8

 Out bytes                    8

 First forwarded              4

 Last forwarded               4

 Protocol                     1

 Direction                    1

 PAD                          1

 PAD                          1

 L4 source port               2

 L4 destination port          2

 Sampling algorithm           1

 PAD                          1

 PAD                          1

 PAD                          1

 Sampling interval            4

 Serial number                65535

 

 

Protocol-port inbound template:

 Template ID                : 3257

 Field count                : 15

 Field type                   Field length (bytes)

---------------------------------------------------------------------------

 Flows                        4

 In packets                   8

 In bytes                     8

 First forwarded              4

 Last forwarded               4

 Protocol                     1

 Direction                    1

 PAD                          1

 PAD                          1

 L4 source port               2

 L4 destination port          2

 Sampling algorithm           1

 PAD                          1

 PAD                          1

 PAD                          1

 Sampling interval            4

 Serial number                65535

Table 3 Command output

Field	Description
Flow template refresh frequency	Refresh frequency at which the templates are sent, in packets.
Flow template refresh interval	Refresh interval at which the templates are sent, in minutes.
Active flow templates	Number of active NetStream templates.
Created flow templates	Number of templates that have been created.
Protocol-port outbound template	Information of the protocol-port template in the outbound direction.
Protocol-port inbound template	Information of the protocol-port template in the inbound direction.
Packets	Number of packets sent by using the template.
Last template export time	Time when the template was last exported.
Field count	Total number of fields in a template.
Field type	Type of a field in the template.
Flows	Number of aggregate flows.
Out packets	Number of sent packets.
In packets	Number of received packets.
Out bytes	Size of sent packets, in bytes.
In bytes	Size of received packets, in bytes.
First forwarded	System time when the first packet was forwarded, accurate to milliseconds.
Last forwarded	System time when the last packet was forwarded, accurate to milliseconds.
L4 source port	Source UDP or TCP port.
L4 destination port	Destination UDP or TCP port.
PAD	Padding string.
Sampling interval	Sampling rate.
Serial number	Device serial number.

‌

enable

Use enable to enable a NetStream aggregation mode.

Use undo enable to disable a NetStream aggregation mode.

Syntax

enable

undo enable

Default

No NetStream aggregation mode is enabled.

Views

NetStream aggregation mode view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable NetStream destination-prefix aggregation mode.

<Sysname> system-view

[Sysname] ip netstream aggregation destination-prefix

[Sysname-ns-aggregation-dstpre] enable

Related commands

ip netstream aggregation

ip netstream

Use ip netstream to enable NetStream on an interface.

Use undo ip netstream to disable NetStream on an interface.

Syntax

ip netstream { inbound | outbound }

undo ip netstream { inbound | outbound }

Default

NetStream is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

inbound: Enables NetStream for incoming traffic.

outbound: Enables NetStream for outgoing traffic.

Usage guidelines

Both the ip netstream command and the ip netstream filter command can enable NetStream on an interface, but you cannot use them together.

Examples

# Enable NetStream for incoming traffic on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ip netstream inbound

ip netstream aggregation

Use ip netstream aggregation to specify a NetStream aggregation mode and enter its view.

Use undo ip netstream aggregation to remove the configuration for a NetStream aggregation mode.

Syntax

ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

undo ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

Default

No NetStream aggregation mode is specified.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

as: Specifies the AS aggregation by source AS number, destination AS number, inbound interface index, and outbound interface index.

destination-prefix: Specifies the destination-prefix aggregation by destination AS number, destination address mask length, destination prefix, and outbound interface index.

prefix: Specifies the source and destination prefix aggregation by the following criteria:

·     Source AS number.

·     Destination AS number.

·     Source address mask length.

·     Destination address mask length.

·     Source prefix.

·     Destination prefix.

·     Inbound interface index.

·     Outbound interface index.

prefix-port: Specifies the prefix-port aggregation by the following criteria:

·     Source prefix.

·     Destination prefix.

·     Source address mask length.

·     Destination address mask length.

·     ToS.

·     Protocol number.

·     Source port.

·     Destination port.

·     Inbound interface index.

·     Outbound interface index.

protocol-port: Specifies the protocol-port aggregation by protocol number, source port, and destination port.

source-prefix: Specifies the source-prefix aggregation by source AS number, source address mask length, source prefix, and inbound interface index.

tos-as: Specifies the ToS-AS aggregation by ToS, source AS number, destination AS number, inbound interface index, and outbound interface index.

tos-bgp-nexthop: Specifies the ToS-BGP nexthop aggregation by ToS, BGP next hop address, and outbound interface index. ToS-BGP next hop aggregation is supported by a version 9 template.

tos-destination-prefix: Specifies the ToS-destination-prefix aggregation by ToS, destination AS number, destination address mask length, destination prefix, and outbound interface index.

tos-prefix: Specifies the ToS-prefix aggregation by the following criteria:

·     ToS.

·     Source AS number.

·     Source prefix.

·     Source address mask length.

·     Destination AS number.

·     Destination address mask length.

·     Destination prefix.

·     Inbound interface index.

·     Outbound interface index.

tos-protocol-port: Specifies the ToS-protocol-port aggregation by ToS, protocol number, source port, destination port, inbound interface index, and outbound interface index.

tos-source-prefix: Specifies the ToS-source-prefix aggregation by ToS, source AS number, source prefix, source address mask length, and inbound interface index.

Usage guidelines

In NetStream aggregation mode view, you can perform the following tasks:

·     Enable or disable the specified NetStream aggregation mode.

·     Configure source interface, destination IP address, and destination port for the NetStream data export.

A flow matching multiple aggregation modes is counted as multiple aggregate flows.

Examples

# Set the NetStream aggregation mode to AS, and enter NetStream AS aggregation mode view.

<Sysname> system-view

[Sysname] ip netstream aggregation as

[Sysname-ns-aggregation-as]

Related commands

enable

ip netstream export host

ip netstream export source

ip netstream export host

Use ip netstream export host to specify a destination host for NetStream data export.

Use undo ip netstream export host to remove the specified destination host or all destination hosts that are configured in the current view.

Syntax

ip netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

undo ip netstream export host [ ip-address [ vpn-instance vpn-instance-name ] ]

Default

No destination host is specified for NetStream data export.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies the destination IP address.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination host belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option.

Usage guidelines

You can specify the same destination IP address and UDP port in different NetStream aggregation mode views. If an aggregation mode is not enabled, the display ip netstream export command cannot display the destination host configuration for the mode.

If no destination host is specified in a NetStream aggregation mode view, the destination host in system view applies. If destination hosts are specified in a NetStream aggregation view and system view, the destination hosts in aggregation view take effect.

You can specify a maximum of four destination hosts in system view or a NetStream aggregation mode view. If you specify a destination host with the same IP address but different UDP ports in the same view, the most recent configuration takes effect. You can specify destination hosts with the same IP address and UDP port but different VPN instances.

NetStream traditional data is exported to all destination hosts in system view. NetStream aggregation data is exported to all destination hosts in the related NetStream aggregation mode view. If you expect only the aggregation data, specify destination hosts only in the NetStream aggregation mode view. Aggregation data export reduces bandwidth usage.

Examples

# In system view, specify 172.16.105.48 as the IP address of the destination host and UDP port 5000 as the export destination port number.

<Sysname> system-view

[Sysname] ip netstream export host 172.16.105.48 5000

Related commands

ip netstream aggregation

ip netstream export source

ip netstream export rate

Use ip netstream export rate to limit the NetStream data export rate.

Use undo ip netstream export rate to restore the default.

Syntax

ip netstream export rate rate

undo ip netstream export rate

Default

The export rate of NetStream data is not limited.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

rate: Specifies the export rate in the range of 1 to 1000.

Usage guidelines

This command sets the maximum number of NetStream packets that can be exported per second. Packets that cannot be exported due to the export rate limit are buffered for later export. When the buffer is full, the system will temporarily invalidate the rate limit and export packets as fast as possible until the buffer has space for new packets.

Examples

# Allow a maximum of 10 packets to be exported per second.

<Sysname> system-view

[Sysname] ip netstream export rate 10

ip netstream export source

Use ip netstream export source to specify the source interface for data packets sent to NetStream servers.

Use undo ip netstream export source to restore the default.

Syntax

ip netstream export source interface interface-type interface-number

undo ip netstream export source

Default

The packets take the IP address of the output interface as the source IP address.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-type interface-number: Specifies a source interface by its type and number.

Usage guidelines

The IP address of the specified source interface is used as the source IP address for packets sent to NetStream servers.

You can configure different source interfaces in different NetStream aggregation mode views.

If no source interface is configured in a NetStream aggregation mode view, the source interface in system view applies.

Examples

# In system view, specify Ten-GigabitEthernet 3/0/1 as the source interface for NetStream traditional data packets.

<Sysname> system-view

[Sysname] ip netstream export source interface ten-gigabitethernet 3/0/1

# In AS aggregation mode view, specify Ten-GigabitEthernet 3/0/2 as the source interface for NetStream aggregation data packets.

<Sysname> system-view

[Sysname] ip netstream aggregation as

[Sysname-ns-aggregation-as] ip netstream export source interface ten-gigabitethernet 3/0/2

Related commands

ip netstream aggregation

ip netstream export template refresh-rate

Use ip netstream export template refresh-rate to set the refresh rate for the NetStream version 9 or version 10 template.

Use undo ip netstream export template refresh-rate to restore the default.

Syntax

ip netstream export template refresh-rate { packet packets | time minutes }

undo ip netstream export template refresh-rate { packet | time }

Default

The packet count-based refresh rate is 20 packets, and the time-based refresh interval is 30 minutes.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

packets: Specifies the number of packets that are sent before the template is sent. The value range is 1 to 600.

time minutes: Specifies the interval at which the template is sent, in the range of 1 to 3600 minutes.

Usage guidelines

Version 9 and version 10 are template-based and support user-defined formats. A NetStream device must send the version 9 or version 10 template to NetStream servers regularly, because the servers do not permanently save the templates.

The refresh rate can be packet count-based or time-based. If both settings are configured, the template is sent when either of the conditions is met.

Examples

# Configure the device to send the Netstream version 9 or version 10 template to NetStream servers every 100 packets.

<Sysname> system-view

[Sysname] ip netstream export template refresh-rate packet 100

ip netstream export version

Use ip netstream export version 5 to export NetStream data in the version 5 format and choose whether to record AS information.

Use ip netstream export version 9 to export NetStream data in the version 9 format and choose whether to record AS, BGP next hop, and serial number information.

Use ip netstream export version 10 to export NetStream data in the version 10 format and choose whether to record AS, BGP next hop, and serial number information.

Use undo ip netstream export version to restore the default.

Syntax

ip netstream export version 5 { origin-as | peer-as }

ip netstream export version { 9 | 10 } { origin-as | peer-as } [ bgp-nexthop ] [ serial-number ]

undo ip netstream export version

Default

NetStream traditional data export uses the version 9 format. The peer AS numbers are exported. The BGP next hop and serial number are not recorded.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

origin-as: Records the source AS of the source address and the destination AS of the destination address.

peer-as: Records the ASs before and after the AS where the NetStream device resides as the source AS and destination AS, respectively.

bgp-nexthop: Records BGP next hops.

serial-number: Records the device serial number.

Usage guidelines

A NetStream entry records the source IP address and destination IP address, and two AS numbers for each IP address. You can choose to configure which AS numbers are to be exported as the source AS and destination AS.

Only version 9 and version 10 formats support recoding BGP next hop and serial number data.

Only one version format can take effect on the device. If you execute the command multiple times, the most recent configuration takes effect.

If the version 5 format is configured, the NetStream aggregation data export uses the version 8 format.

If the version 9 format is configured, the NetStream aggregation data export uses the version 9 format.

If the version 10 format is configured, the NetStream aggregation data export uses the version 10 format.

Examples

# Configure the device to export NetStream data in the version 5 format and specify the NetStream data to include the source AS and destination AS.

<Sysname> system-view

[Sysname] ip netstream export version 5 origin-as

# Configure the device to export NetStream data in the version 9 format and specify the NetStream data to include the source AS and destination AS. Record the BGP next hop and serial number information.

<Sysname> system-view

[Sysname] ip netstream export version 9 origin-as bgp-nexthop serial-number

ip netstream filter

Use ip netstream filter to enable NetStream filtering on an interface.

Use undo ip netstream filter to disable NetStream filtering on an interface.

Syntax

ip netstream { inbound | outbound } filter acl acl-number

undo ip netstream { inbound | outbound } filter

Default

NetStream filtering is disabled. NetStream collects statistics about all IPv4 packets passing through an interface.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

inbound: Filters incoming traffic.

outbound: Filters outgoing traffic.

acl ipv4-acl-number: Specifies an IPv4 ACL by its number. The value range for ACLs is as follows:

·     2000 to 2999 for basic ACLs.

·     3000 to 3999 for advanced ACLs.

·     4000 to 4999 for Layer 2 ACLs.

·     5000 to 5999 for user-defined ACLs.

Usage guidelines

NetStream filtering uses an ACL to identify intended packets. If you want to collect data for specific flows, use the ACL permit statements to identify the flows. NetStream collects data only for these flows.

Both the ip netstream command and the ip netstream filter command can enable NetStream on an interface, but you cannot use them together.

Examples

# Use ACL 3003 for inbound NetStream filtering on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ip netstream inbound

[Sysname-Ten-GigabitEthernet3/0/1] ip netstream inbound filter acl 3003

ip netstream sampler

Use ip netstream sampler to enable NetStream sampling.

Use undo ip netstream sampler to disable NetStream sampling.

Syntax

ip netstream { inbound | outbound } sampler sampler-name

undo ip netstream { inbound | outbound } sampler

Default

NetStream sampling is disabled.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

inbound: Enables NetStream sampling in the inbound direction.

outbound: Enables NetStream sampling in the outbound direction.

sampler sampler-name: Specifies a sampler by its name. The name is a case-insensitive string of 1 to 31 characters.

Usage guidelines

By default, NetStream collects all data of target flows. If the flow traffic is heavy, NetStream is resource-consuming and can cause high CPU usage, which impacts the device forwarding performance. NetStream sampling is helpful to decrease the NetStream traffic volume. If the collected statistics can basically reflect the network status, you can enable this feature and set a proper sampling rate. The higher the sampling rate, the less impact on device performance.

Examples

# Use sampler abc for inbound NetStream sampling on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ip netstream inbound

[Sysname-Ten-GigabitEthernet3/0/1] ip netstream inbound sampler abc

ip netstream timeout active

Use ip netstream timeout active to set the aging timer for active flows.

Use undo ip netstream timeout active to restore the default.

Syntax

ip netstream timeout active minutes

undo ip netstream timeout active

Default

The aging timer is 5 minutes for active flows.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

minutes: Sets the aging timer for active flows, in the range of 1 to 20000 minutes.

Usage guidelines

A flow is considered active if packets for the NetStream entry arrive before the timer set by this command expires.

Examples

# Set the aging timer to 60 minutes for active flows.

<Sysname> system-view

[Sysname] ip netstream timeout active 60

Related commands

ip netstream timeout inactive

ip netstream timeout inactive

Use ip netstream timeout inactive to set the aging timer for inactive flows.

Use undo ip netstream timeout inactive to restore the default.

Syntax

ip netstream timeout inactive seconds

undo ip netstream timeout inactive

Default

The aging timer is 300 seconds for inactive flows.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Sets the aging timer for inactive flows, in the range of 10 to 28000 seconds.

Usage guidelines

A flow is considered inactive if no packet for the NetStream entry arrives before the timer set by this command expires.

This command configures the inactive flow aging timer for IPv4 NetStream and IPv6 NetStream, and the aging time for session-based NetStream statistics.

Examples

# Set the aging timer to 60 seconds for inactive flows.

<Sysname> system-view

[Sysname] ip netstream timeout inactive 60

Related commands

ip netstream timeout active

netstream key

Use netstream key to set the NetStream flow classification key fields.

Use netstream key to restore the default.

Syntax

netstream key [ destination-ip | destination-mac | destination-port | | protocol | source-ip | source-mac | source-port ] *

undo netstream key

Default

No key fields are specified for NetStream flow classification.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

destination-ip: Uses the destination IP address as a flow classification key field.

destination-mac: Uses the destination MAC address as a flow classification key field.

destination-port: Uses the destination port number as a flow classification key field.

protocol: Uses the protocol type as a flow classification key field.

source-ip: Uses the source IP address as a flow classification key field.

source-mac: Uses the source MAC address as a flow classification key field.

source-port: Uses the source port number as a flow classification key field.

Usage guidelines

By default, the hardware classifies packets into NetStream flows based on these key fields: source and destination IP addresses, source and destination MAC addresses, and protocol. Packets matching the same key fields are grouped into one flow and sent to NetStream regularly for further tracking.

You can set the flow classification key fields to suit specific traffic monitoring requirements. For example, if you are concerned with only the traffic destination, you can set the destination IP address as the flow classification key field. All packets destined for the same IP address are classified into one flow.

To collect traffic flows based on the 5-tuple, configure the following key fields for NetStream flow classification:

·     destination-ip.

·     destination-port.

·     protocol.

·     source-ip.

·     source-port.

If you do not follow this restriction, NetStream will set these fields to fixed values for all flows.

Examples

# Set the source IP address, destination IP address, source port number, destination port number, protocol, and ToS value as the NetStream flow classification key fields.

<Sysname>system-view

[Sysname] netstream key source-ip destination-ip source-port destination-port protocol ip-tos

reset ip netstream statistics

Use reset ip netstream statistics to clear the NetStream cache and export the cached entries to NetStream servers.

Syntax

reset ip netstream statistics

Views

User view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

It takes the system several minutes to execute the command. During this period, the system does not collect NetStream data.

Examples

# Clear the NetStream cache and export the cached data to NetStream servers.

<Sysname> reset ip netstream statistics

This process may take a few minutes.

Netstream statistic function is disabled during this process.

snmp-agent trap enable ip netstream

Use snmp-agent trap enable ip netstream to enable SNMP notifications for NetStream.

Use undo snmp-agent trap enable ip netstream to disable SNMP notifications for NetStream.

Syntax

snmp-agent trap enable ip netstream [ entry-limit ]

undo snmp-agent trap enable ip netstream [ entry-limit ]

Default

SNMP notification is disabled for NetStream.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

entry-limit: Generates an alarm when the number of cached NetStream entries exceeds 80% or drops below 70% of the maximum permitted value. If you do not specify this keyword, the system enables or disables all SNMP notifications for NetStream.

Usage guidelines

Use this feature to report important events for NetStream through SNMP notifications. The generated alarm information will be sent to the SNMP module on the device and you can configure the SNMP notification sending parameters to determine the export attributes of the alarm information. For more information, see "Configuring SNMP."

Examples

# Enable SNMP notifications for NetStream.

<Sysname> system-view

[Sysname] snmp-agent trap enable ip netstream

Session-based NetStream commands

display session-based netstream aggregation-cache

Use display session-based netstream aggregation-cache to display session-based NetStream statistics.

Syntax

In standalone mode:

display session-based netstream aggregation-cache session [ slot slot-number ]

In IRF mode:

display session-based netstream aggregation-cache session [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

session: Specifies the session aggregation mode. The aggregation criteria of this mode include source MAC address, destination MAC address, source IP address, destination IP address, source port number, destination port number, and protocol type.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays session-based NetStream statistics on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays session-based NetStream statistics on all cards. (In IRF mode.)

Examples

# Display statistics about session-based NetStream in session aggregation mode.

<Sysname> display session-based netstream aggregation-cache session

Active entries                                           :1

Timeout time for session-based NetStream entries         :10

Session-timeout time for session-based NetStream entries :400

SrcMAC          DstMAC          SrcIP          DstIP         SrcPort   DstPort

InPkts          InBytes         OutPkts        OutBytes      Pro       LogType

0001-0001-0001  0002-0002-0002  192.168.1.1   192.168.2.1    4000      5000

4               240             4             240            6         0x

Table 4 Command output

Field	Description
Active entries	Number of active session-based NetStream entries.
Timeout time for session-based NetStream entries	Maximum period of time in minutes a session-based NetStream entry can be cached before being exported to NetStream servers.
Session-timeout time for session-based NetStream entries	Aging timer for inactive sessions, in seconds.
SrcMAC	This field is not supported in the current software version. Source MAC address.
DstMAC	This field is not supported in the current software version. Destination MAC address.
SrcIP	Source IP address.
DstIP	Destination IP address.
SrcPort	Source port number.
DstPort	Destination port number.
InPkts	Number of upstream packets.
InBytes	Number of upstream bytes.
OutPkts	Number of downstream packets.
OutBytes	Number of downstream bytes.
Pro	Protocol number.
LogType	Type of the log entry: ·     0x1—Entry creation. ·     0x2—Entry update. ·     0x3—Entry creation and update. ·     0x4—Entry ending. ·     0x5—Entry creation and ending. ·     0x6—Entry creation, update, and ending.

‌

session-based netstream enable

Use session-based netstream enable to enable session-based NetStream.

Use undo session-based netstream enable to disable session-based NetStream.

Syntax

session-based netstream enable

undo session-based netstream enable

Views

System view

Default

Session-based NetStream is disabled.

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Session-based NetStream provides statistics for session-based services and exports the statistics in NetStream version 9 format to NetStream servers. The system merges statistics for multiple sessions if each aggregation criterion is of the same value. The aggregation criteria of the session aggregation mode include source MAC address, destination MAC address, source IP address, destination IP address, source port number, destination port number, and protocol type.

Examples

# Enable session-based NetStream.

<Sysname> system-view

[Sysname] session-based netstream enable

session-based netstream export host

Use session-based netstream export host to specify a destination host for session-based NetStream data export.

Use undo session-based netstream export host to restore the default.

Syntax

session-based netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

undo session-based netstream export host

Default

No destination host is specified for session-based NetStream data export.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies the IP address of the destination host.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination host belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the destination host is on the public network, do not specify this option.

Examples

# Export session-based NetStream data to UDP port 9020 on host 172.16.1.1.

<Sysname> system-view

[Sysname] session-based netstream export host 172.16.1.1 9020

session-based netstream export source ip

Use session-based netstream export source ip to specify a source IP address for session-based NetStream packets.

Use undo session-based netstream export source ip to restore the default.

Syntax

session-based netstream export source ip ip-address

undo session-based netstream export source ip

Default

The source IP address of session-based NetStream packets is the primary IP address of the output interface.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies an IP address.

Examples

# Specify 172.16.1.1 as the source IP address for session-based NetStream packets.

<Sysname> system-view

[Sysname] session-based netstream export source ip 172.16.1.1