Table of Contents

Related Documents

14-NetStream commands

Title	Size	Download
14-NetStream commands	127.13 KB

NetStream commands

display ip netstream cache

Use display ip netstream cache to display NetStream entry information.

Syntax

In standalone mode:

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-ip | destination-port destination-port | interface interface-type interface-number | protocol protocol | source source-ip | source-port source-port ] * [ arrived-time start-date start-time end-date end-time ] [ slot slot-number ]

In IRF mode:

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

verbose: Displays detailed information about NetStream entries. If you do not specify this keyword, this command displays brief information about NetStream entries.

type: Specifies the NetStream entry type. If you do not specify this keyword, this commands displays information about all types of NetStream entries.

ip: Specifies Layer 3 NetStream entries.

ipl2: Specifies Layer 2 and Layer 3 NetStream entries.

l2: Specifies Layer 2 NetStream entries.

mpls: Specifies MPLS NetStream entries.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value3 argument is 0 to 1048575.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

destination-port destination-port: Specifies a destination port number in the range of 0 to 65535. If you specify this option, this command does not display Layer 2 NetStream entries.

interface interface-type interface-number: Specifies an interface by its type and number.

protocol protocol: Specifies a protocol by its number in the range of 0 to 255 or by its name such as GRE, OSPF, TCP, or UDP. If you specify this option, this command does not display Layer 2 NetStream entries.

source source-ip: Specifies a source IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

source-port source-port: Specifies a source port number in the range of 0 to 65535. If you specify this option, this command does not display Layer 2 NetStream entries.

arrived-time: Specifies an arrived time range to display NetStream entries. If you do not specify this keyword, the arrived time is not used as a criterion for filtering the NetStream entries to be displayed.

start-date: Specifies the start date in the format of MM/DD/YYYY or YYYY/MM/DD, where MM is in the range of 1 to 12 and YYYY is in the range of 2000 to 2035. The value range for DD varies by the value of MM.

start-time: Specifies the start time in the format of HH:MM:SS, where HH is in the range of 0 to 23, MM and SS are in the range of 0 to 59. The SS element can be omitted if its value is 00. Both the SS and MM elements can be omitted if their values are 0. For example, the start time of 0 indicates 00:00:00.

end-date: Specifies the end date in the format of MM/DD/YYYY or YYYY/MM/DD, where MM is in the range of 1 to 12 and YYYY is in the range of 2000 to 2035. The value range for DD varies by the value of MM.

end-time: Specifies the end time in the format of HH:MM:SS, where HH is in the range of 0 to 23, MM and SS are in the range of 0 to 59. The SS element can be omitted if its value is 00. Both the SS and MM elements can be omitted if their values are 0. For example, the end time of 0 indicates 00:00:00.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information about NetStream entries for all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information about NetStream entries for all cards. (In IRF mode.)

Usage guidelines

The types of NetStream entries for flow packets vary by the export template version and whether the flow packets contain IP headers.

· If the version 9 template is used:

¡ The type of the NetStream entry is ipl2 (Layer 2 and Layer 3) for flow packets containing IP headers.

¡ The type of the Netstream entry is l2 (Layer 2) for flow packets without IP headers.

· If the version 5 template is used:

¡ The type of the NetStream entry is ip (Layer 3) for flow packets containing IP headers.

¡ The type of the NetStream entry is l2 (Layer 2) for flow packets without IP headers.

Examples

# Display information about NetStream entries arrived at the NetStream cache between 14:19:03 and 14:23:03 on July 28, 2017.

<Sysname> display ip netstream cache arrived-time 7/28/2017 14:19:03 7/28/2017 14:23:03

Type DstIP(Port) SrcIP(Port) Pro ToS VNI APPID If(Direct) Pkts

DstMAC(VLAN) SrcMAC(VLAN)

TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP 11.1.1.1(1024) 11.1.1.2(21) 17 128 N/A 0xe GE1/0/1(I) 42996

First packet arrived: 7/28/2017, 14:20:03

Last packet arrived: 7/28/2017, 14:21:03

IP& 172.16.1.1(68) 172.16.2.1(67) 17 64 N/A 0xe GE1/0/2(O) 291

MPLS LDP(4.4.4.4/24) 1:55-6-0

2:16-6-1

First packet arrived: 7/28/2017, 14:20:03

Last packet arrived: 7/28/2017, 14:23:03

# Display detailed information about NetStream entries.

<Sysname> display ip netstream cache verbose

IP NetStream cache information:

Active flow timeout : 60 min

Inactive flow timeout : 10 sec

Max number of entries : 1000

IP active flow entries : 1

MPLS active flow entries : 1

L2 active flow entries : 0

IPL2 active flow entries : 0

IP flow entries counted : 10

MPLS flow entries counted : 20

L2 flow entries counted : 10

IPL2 flow entries counted : 20

Last statistics resetting time : 01/01/2000 at 00:01:02

IP packet size distribution (1103746 packets in total):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608

.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000

Protocol Total Packets Flows Packets Active(sec) Idle(sec)

Flows /sec /sec /flow /flow /flow

--------------------------------------------------------------------------

TCP-Telnet 2656855 372 4 86 49 27

TCP-FTP 5900082 86 9 9 11 33

TCP-FTPD 3200453 1006 5 193 45 33

TCP-WWW 546778274 11170 887 12 8 32

TCP-other 49148540 3752 79 47 30 32

UDP-DNS 117240379 570 190 3 7 34

UDP-other 45502422 2272 73 30 8 37

ICMP 14837957 125 24 5 12 34

IP-other 77406 5 0 47 52 27

Type DstIP(Port) SrcIP(Port) Pro ToS VNI APPID If(Direct) Pkts

DstMAC(VLAN) SrcMAC(VLAN)

TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP 11.1.1.1(1024) 11.1.1.2(21) 17 128 N/A 0xe GE1/0/1(I) 42996

TCPFlag: 27

DstMask: 24 SrcMask: 24 NextHop: 0.0.0.0

DstAS: 0 SrcAS: 0 BGPNextHop: 0.0.0.0

InVRF: vpn1

SamplerMode: 2 SamplerInt: 256

Active: 120.600 Bytes/Pkt: 152

First packet arrived: 10/28/2013, 14:10:03

Last packet arrived: 10/28/2013, 14:21:03

MPLS LDP(3.3.3.3/24) 1:18-6-0 19 128 N/A 0xe GE1/0/2(O) 291

2:24-6-0

3:30-6-1

SamplerMode: 0 SamplerInt: 0

Active: 660.084 Bytes/Pkt: 100

First packet arrived: 10/28/2013, 14:10:01

Last packet arrived: 10/28/2013, 14:21:03

Table 1 Command output

Field	Description
Active flow timeout	Aging timer for active flows, in minutes.
Inactive flow timeout	Aging timer for inactive flows, in seconds.
Max number of entries	Maximum number of flows allowed in the cache.
IP active flow entries	Number of active IP flows in the cache.
MPLS active flow entries	Number of active MPLS flows in the cache.
L2 active flow entries	Number of active Layer 2 flows in the cache.
IPL2 active flow entries	Number of active Layer 2 and Layer 3 flows in the cache.
IP flow entries counted	Number of IP flows that have been counted.
MPLS flow entries counted	Number of MPLS flows that have been counted.
L2 flow entries counted	Number of Layer 2 flows that have been counted.
IPL2 flow entries counted	Number of Layer 2 and Layer 3 flows that have been counted.
Last statistics resetting time	Last time the reset ip netstream statistics command was executed. This field displays Never if you have never executed this command.
IP packet size distribution (1103746 packets in total)	Distribution of IP packets by packet size, and the bracketed number is the total number of IP packets. The value is displayed in the proportion of the number of IP packets of the specified sizes to the total number of IP packets, and the value is displayed with 3 decimal places.
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608	Range of IP packet length (excluding data link layer header) in bytes. · For the values in the range of 1 to 576, the range increases in the step of 32. For example, 1-32 shows the number of packets with the size of 1 to 32 bytes. 64 shows the number of packets with the size of 33 to 64 bytes. · For the values greater than 1024, the range increases in the step of 512. For example, 1536 shows the number of packets with the size of 1025 to 1536 bytes. · Packets with the size of 577 to 1024 bytes are recorded in the 1024 entry.
Protocol Total Flows Packets /sec Flows/sec Packets/flow Active(sec)/flow Idle(sec)/flow	Statistics of packets by protocol type: · Protocol type. · Total number of flows. · Number of packets per second. · Number of flows per second. · Number of packets per flow. · Active time (in seconds) of each flow. · Inactive time (in seconds) of each flow.
Type DstIP(Port) SrcIP(Port) Pro ToS VNI APPID If(Direct) Pkts	Statistics of the active flows in the current cache: · Flow type. Flows are classified into the following types: ¡ Layer 3 flows. ¡ Layer 2 flows. ¡ Layer 2 and Layer 3 flows. ¡ MPLS flows without IP options. ¡ MPLS flows with IP options. · Destination IP address (destination port). · Source IP address (source port). · Protocol number. · ToS. · VXLAN ID. The VNI field displays N/A for non-VXLAN packets and on VXLAN-incapable devices. · Application ID. · Interface name (direction). · Number of packets. ICMP packets do not contain port number fields, so the type and code fields are captured. The value for the destination port represents these two fields: · The highest 8 bits represent the type field. · The lowest 8 bits represent the code field. The value for the source port is set to 0 and does not indicate any statistics.
DstMAC(VLAN) SrcMAC(VLAN)	Layer 2 information of the active flows in the current cache: · Destination MAC address. · Destination VLAN ID. · Source MAC address. · Source VLAN ID.
TopLblType(IP/Mask) Lbl-Exp-S-List	Information about the active MPLS flows in the current cache: · Type of the labels at the top of the label stack: ¡ IP address associated with the label. ¡ Mask associated with the label. · Label list. Up to three labels can be listed in one label list.
TCPFlag: DstMask: SrcMask: NextHop: DstAS: SrcAS: BGPNextHop: OutVRF: InVRF: SamplerMode: SamplerInt: Active: Bytes/Pkt: First packet arrived: Last packet arrived:	Other information about the active flows in the cache: · TCP tag. · Destination mask. · Source mask. · Routing next hop. · Destination AS. · Source AS. · BGP next hop. · VPN instance to which the outbound packets belong. · VPN instance to which the inbound packets belong. · · Sampling mode. Supported sampling modes are: ¡ 0—No sampling. ¡ 1—Fixed sampling. ¡ 2—Random sampling. · Sampling interval. · Flow's active time. · Number of bytes per packet. · Arrival time of the first packet of the flow. · Arrival time of the last packet of the flow.

‌

display ip netstream cache archive

Use display ip netstream cache archive to display the locally archived NetStream entries.

Syntax

In standalone mode:

display ip netstream cache archive [ verbose ] [ type { ip | ipl2 | l2 | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-ip | destination-port destination-port | interface interface-type interface-number | protocol protocol | source source-ip | source-port source-port ] * [ arrived-time start-date start-time end-date end-time ] [ slot slot-number ]

In IRF mode:

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

verbose: Displays detailed NetStream entry information.

type: Specifies the NetStream entry type. If you do not specify this keyword, this commands displays information about all types of NetStream entries.

ip: Specifies Layer 3 NetStream entries.

ipl2: Specifies Layer 2 and Layer 3 NetStream entries.

l2: Specifies Layer 2 NetStream entries.

mpls: Specifies MPLS NetStream entries.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

interface interface-type interface-number: Specifies an interface by its type and number.

source source-ip: Specifies a source IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

destination-port destination-port: Specifies a destination port number in the range of 0 to 65535. If you specify this option, this command does not display Layer 2 NetStream entries.

source-port source-port: Specifies a source port number in the range of 0 to 65535. If you specify this option, this command does not display Layer 2 NetStream entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information about NetStream entries for all cards. (In standalone mode.)

Examples

# Display information about the NetStream entries archived between 14:10:03 and 14:23:03 on July 28, 2017.

<Sysname> display ip netstream cache archive arrived-time 7/28/2017 14:10:03 7/28/2017 14:23:03

Type DstIP(Port) SrcIP(Port) Pro ToS VNI APPID If(Direct) Pkts

DstMAC(VLAN) SrcMAC(VLAN)

TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP 11.1.1.1(1024) 11.1.1.2(21) 6 128 10 0xe GE1/0/1(I) 42996

First packet arrived: 7/28/2017, 14:20:03

Last packet arrived: 7/28/2017, 14:21:03

MPLS LDP(3.3.3.3/24) 1:18-6-0 6 128 N/A 0xe GE1/0/2(O) 291

2:24-6-0

3:30-6-1

First packet arrived: 7/28/2017, 14:20:01

Last packet arrived: 7/28/2017, 14:21:03

See Table 1 for the command output description.

Related commands

ip netstream cache archive enable

display ip netstream export

Use display ip netstream export to display information about the NetStream data export.

Syntax

display ip netstream export

Views

Any view

Predefined user roles

network-admin

network-operator

Usage guidelines

IP NetStream export information varies by aggregation mode. This command displays IP NetStream export information for all the configured aggregation modes.

Examples

# Display information about the NetStream data export.

<Sysname> display ip netstream export

IP export information:

Flow source interface : GigabitEthernet1/0/1

Flow destination VPN instance : VPN1

Flow destination IP address (UDP) : 10.10.0.10 (30000)

Version 5 exported flow number : 16

Version 5 exported UDP datagram number (failed) : 16 (0)

Version 9 exported flow number : 20

Version 9 exported UDP datagram number (failed) : 2 (0)

Version 10 exported flow number : 0

Version 10 exported UDP datagram number (failed) : 0 (0)

MPLS export information:

Flow source interface : GigabitEthernet1/0/1

Flow destination VPN instance : VPN1

Flow destination IP address (UDP) : 10.10.0.10 (30000)

Version 9 exported flow number : 20

Version 9 exported UDP datagram number (failed) : 2 (0)

protocol-port aggregation export information:

Flow source interface : GigabitEthernet1/0/1

Flow destination VPN instance : VPN1

Flow destination IP address (UDP) : 10.10.0.10 (30000)

Version 8 exported flow number : 16

Version 8 exported UDP datagram number (failed) : 2 (0)

Version 9 exported flow number : 16

Version 9 exported UDP datagram number (failed) : 2 (0)

Table 2 Command output

Field	Description
IP export information	NetStream version 5 or version 9 data export information.
Flow source interface	Source interface from which the NetStream data is exported.
Flow destination VPN instance	VPN to which the destination address of the NetStream data export belongs.
Flow destination IP address (UDP)	Destination IP address and UDP port number of the NetStream data export.
Version 5 exported flow number	Number of flows that are exported in version 5 format.
Version 5 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 5 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
Version 9 exported flow number	Number of flows that are exported in version 9 format.
Version 9 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 9 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
MPLS export information	Information about MPLS flows exported in version 9 format.
L2 export information	Statistics of the Layer 2 data export.
protocol-port aggregation export information	Statistics of NetStream protocol-port aggregation in version 8 format.
Version 8 exported flow number	Number of flows that are exported in version 8 format.
Version 8 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 8 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

‌

display ip netstream template

Use display ip netstream template to display NetStream template information.

Syntax

In standalone mode:

display ip netstream template [ slot slot-number ]

In IRF mode:

display ip netstream template [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays NetStream template information for the active MPU. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays NetStream template information for the global active MPU. (In IRF mode.)

Usage guidelines

IP NetStream templates vary by aggregation mode. This command displays IP NetStream template information for all the configured aggregation modes.

Examples

# Display NetStream template information.

<Sysname> display ip netstream template slot 1

Flow template refresh frequency : 20

Flow template refresh interval : 30 min

Active flow templates : 2

Created flow templates : 2

L3 outbound template:

Template ID : 3282

Packets : 0

Last template export time : 12/18/2017 at 14:51:15

Field count : 28

Field type Field length (bytes)

------------------------------------------------------------------------------

Out packets 8

Out bytes 8

First forwarded 4

Last forwarded 4

Input interface index 4

Output interface index 4

Source IPv4 address 4

Destination IPv4 address 4

Next hop IPv4 address 4

Source AS 4

Destination AS 4

L4 source port 2

L4 destination port 2

IP protocol version 1

TCP flags 1

Protocol 1

Source ToS 1

Source address mask 1

Destination address mask 1

Direction 1

Forwarding status 1

Out VPN ID 2

Sampling algorithm 1

PAD 1

Sampling interval 4

VXLAN ID 4

App ID 4

VPN instance name 65535

L3 inbound template:

Template ID : 3281

Packets : 0

Last template export time : 12/18/2017 at 14:51:15

Field count : 28

Field type Field length (bytes)

------------------------------------------------------------------------------

In packets 8

In bytes 8

First forwarded 4

Last forwarded 4

Input interface index 4

Output interface index 4

Source IPv4 address 4

Destination IPv4 address 4

Next hop IPv4 address 4

Source AS 4

Destination AS 4

L4 source port 2

L4 destination port 2

IP protocol version 1

TCP flags 1

Protocol 1

Source ToS 1

Source address mask 1

Destination address mask 1

Direction 1

Forwarding status 1

In VPN ID 2

Sampling algorithm 1

PAD 1

Sampling interval 4

VXLAN ID 4

App ID 4

VPN instance name 65535

Table 3 Command output

Field	Description
Flow template refresh frequency	Refresh frequency at which the templates are sent, in packets.
Flow template refresh interval	Refresh interval at which the templates are sent, in minutes.
Active flow templates	Number of active NetStream templates.
Created flow templates	Number of templates that have been created.
Protocol-port outbound template	Information of the protocol-port template in the outbound direction.
Protocol-port inbound template	Information of the protocol-port template in the inbound direction.
Packets	Number of packets sent by using the template.
Last template export time	Time when the template was last exported.
Field count	Total number of fields in a template.
Field type	Type of a field in the template.
Flows	Number of aggregate flows.
Out packets	Number of sent packets.
In packets	Number of received packets.
Out bytes	Size of sent packets, in bytes.
In bytes	Size of received packets, in bytes.
First forwarded	System time when the first packet was forwarded, accurate to milliseconds.
Last forwarded	System time when the last packet was forwarded, accurate to milliseconds.
L4 source port	Source port number.
L4 destination port	Destination port number.
TCP flags	TCP flag of the flow.
Protocol	Layer 4 protocol type.
Out VPN ID	Name of the VPN instance to which the egress interface of the packets belong.
In VPN ID	Name of the VPN instance to which the ingress interface of the packets belong.
PAD	Padding string.
VXLAN ID	VXLAN ID.
App ID	Application ID.
VPN instance name	VPN instance name. If the packets belong to the public network, this field displays N/A.

enable

Use enable to enable a NetStream aggregation mode.

Use undo enable to disable a NetStream aggregation mode.

Syntax

enable

undo enable

Default

No NetStream aggregation mode is enabled.

Views

NetStream aggregation mode view

Predefined user roles

network-admin

Examples

# Enable NetStream destination-prefix aggregation mode.

<Sysname> system-view

[Sysname] ip netstream aggregation destination-prefix

[Sysname-ns-aggregation-dstpre] enable

Related commands

ip netstream aggregation

ip netstream

Use ip netstream to enable NetStream on an interface.

Use undo ip netstream to disable NetStream on an interface.

Syntax

ip netstream [ inbound | outbound ]

undo ip netstream [ inbound | outbound ]

Default

NetStream is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Enables NetStream for incoming traffic.

outbound: Enables NetStream for outgoing traffic.

Usage guidelines

If you configure this command without specifying a traffic direction, NetStream is enabled on the interface for both incoming and outgoing traffic.

Examples

# Enable NetStream for incoming traffic on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] ip netstream inbound

ip netstream aggregation

Use ip netstream aggregation to specify a NetStream aggregation mode and enter its view.

Use undo ip netstream aggregation to remove the configuration for a NetStream aggregation mode.

Syntax

ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

undo ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

Default

No NetStream aggregation mode is specified.

Views

System view

Predefined user roles

network-admin

Parameters

as: Specifies the AS aggregation by source AS number, destination AS number, inbound interface index, and outbound interface index.

destination-prefix: Specifies the destination-prefix aggregation by destination AS number, destination address mask length, destination prefix, and outbound interface index.

prefix: Specifies the source-prefix aggregation by source AS number, source address mask length, source prefix, and inbound interface index.:

prefix-port: Specifies the prefix-port aggregation by the following criteria:

· Source prefix.

· Destination prefix.

· Source address mask length.

· Destination address mask length.

· ToS.

· Protocol number.

· Source port.

· Destination port.

· Inbound interface index.

· Outbound interface index.

protocol-port: Specifies the protocol-port aggregation by protocol number, source port, and destination port.

source-prefix: Specifies the source and destination prefix aggregation by the following criteria:

· Source AS number.

· Destination AS number.

· Source address mask length.

· Destination address mask length.

· Source prefix.

· Destination prefix.

· Inbound interface index.

· Outbound interface index.

tos-as: Specifies the ToS-AS aggregation by ToS, source AS number, destination AS number, inbound interface index, and outbound interface index.

tos-bgp-nexthop: Specifies the ToS-BGP nexthop aggregation by ToS, BGP next hop address, and outbound interface index. ToS-BGP next hop aggregation is supported by a version 9 template.

tos-destination-prefix: Specifies the ToS-destination-prefix aggregation by ToS, destination AS number, destination address mask length, destination prefix, and outbound interface index.

tos-prefix: Specifies the ToS-prefix aggregation by the following criteria:

· ToS.

· Source AS number.

· Source prefix.

· Source address mask length.

· Destination AS number.

· Destination address mask length.

· Destination prefix.

· Inbound interface index.

· Outbound interface index.

tos-protocol-port: Specifies the ToS-protocol-port aggregation by ToS, protocol number, source port, destination port, inbound interface index, and outbound interface index.

tos-source-prefix: Specifies the ToS-source-prefix aggregation by ToS, source AS number, source prefix, source address mask length, and inbound interface index.

Usage guidelines

In NetStream aggregation mode view, you can perform the following tasks:

· Enable or disable the specified NetStream aggregation mode.

· Configure source interface, destination IP address, and destination port for the NetStream data export.

A flow matching multiple aggregation modes is counted as multiple aggregate flows.

Examples

# Set the NetStream aggregation mode to AS, and enter NetStream AS aggregation mode view.

<Sysname> system-view

[Sysname] ip netstream aggregation as

[Sysname-ns-aggregation-as]

Related commands

enable

ip netstream export host

ip netstream export source

ip netstream aging

Use ip netstream aging command to enable periodical aging and TCP FIN- and RST-triggered aging.

Use undo ip netstream aging to disable periodical aging and TCP FIN- and RST-triggered aging.

Syntax

ip netstream aging

undo ip netstream aging

Default

Periodical aging and TCP FIN- and RST-triggered aging are enabled.

Views

System view

Predefined user roles

network-admin

Examples

# Disable periodical aging and TCP FIN- and RST-triggered aging.

<Sysname> system-view

[Sysname] undo ip netstream aging

ip netstream cache archive enable

Use ip netstream cache archive enable to enable archiving of cached NetStream entries.

Use undo ip netstream cache archive enable to disable archiving of cached NetStream entries.

Syntax

ip netstream cache archive enable

undo ip netstream cache archive enable

Default

Archiving of cached NetStream entries is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command enables local archiving of cached NetStream entries when they are exported to NetStream servers.

You can display the locally archived NetStream entries by using the display ip netstream cache archive command.

Examples

# Enable archiving of cached NetStream entries.

<Sysname> system-view

[Sysname] ip netstream cache archive enable

Related commands

display ip netstream cache archive

ip netstream export host

Use ip netstream export host to specify a destination host for NetStream data export.

Use undo ip netstream export host to remove the specified destination host or all destination hosts that are configured in the current view.

Syntax

ip netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

undo ip netstream export host [ ip-address [ vpn-instance vpn-instance-name ] ]

Default

No destination host is specified.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

Parameters

ip-address: Specifies the destination IP address.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination host belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option.

Usage guidelines

You can specify the same destination IP address and UDP port in different NetStream aggregation mode views. If an aggregation mode is not enabled, the display ip netstream export command cannot display the destination host configuration for the mode.

If no destination host is specified in a NetStream aggregation mode view, the destination host in system view applies. If destination hosts are specified in a NetStream aggregation view and system view, the destination hosts in aggregation view take effect.

You can specify a maximum of four destination hosts in system view or a NetStream aggregation mode view. If you specify a destination host with the same IP address but different UDP ports in the same view, the most recent configuration takes effect. You can specify destination hosts with the same IP address and UDP port but different VPN instances.

NetStream traditional data is exported to all destination hosts in system view. NetStream aggregation data is exported to all destination hosts in the related NetStream aggregation mode view. If you expect only the aggregation data, specify destination hosts only in the NetStream aggregation mode view. Aggregation data export reduces bandwidth usage.

Examples

# In system view, specify 172.16.105.48 as the IP address of the destination host and UDP port 5000 as the export destination port number.

<Sysname> system-view

[Sysname] ip netstream export host 172.16.105.48 5000

Related commands

ip netstream aggregation

ip netstream export source

ip netstream export rate

Use ip netstream export rate to limit the NetStream data export rate.

Use undo ip netstream export rate to restore the default.

Syntax

ip netstream export rate rate

undo ip netstream export rate

Default

The export rate of NetStream data is not limited.

Views

System view

Predefined user roles

network-admin

Parameters

rate: Specifies the export rate in the range of 1 to 1000.

Usage guidelines

This command sets the maximum number of NetStream packets that can be exported per second. Packets that cannot be exported due to the export rate limit are buffered for later export. When the buffer is full, the system will temporarily invalidate the rate limit and export packets as fast as possible until the buffer has space for new packets.

Examples

# Allow a maximum of 10 packets to be exported per second.

<Sysname> system-view

[Sysname] ip netstream export rate 10

ip netstream export source

Use ip netstream export source to specify the source interface for data packets sent to NetStream servers. Use undo ip netstream export source to restore the default.

Syntax

ip netstream export source interface interface-type interface-number

undo ip netstream export source

Default

The packets take the IP address of the output interface as the source IP address.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies a source interface by its type and number.

Usage guidelines

The IP address of the specified source interface is used as the source IP address for packets sent to NetStream servers.

You can configure different source interfaces in different NetStream aggregation mode views.

If no source interface is configured in a NetStream aggregation mode view, the source interface in system view applies.

Examples

# In system view, specify GigabitEthernet 1/0/1 as the source interface for NetStream traditional data packets.

<Sysname> system-view

[Sysname] ip netstream export source interface gigabitethernet 1/0/1

# In AS aggregation mode view, specify GigabitEthernet 1/0/2 as the source interface for NetStream aggregation data packets.

<Sysname> system-view

[Sysname] ip netstream aggregation as

[Sysname-ns-aggregation-as] ip netstream export source interface gigabitethernet 1/0/2

Related commands

ip netstream aggregation

ip netstream export v9-template refresh-rate

Use ip netstream export v9-template refresh-rate to set the refresh rate for the NetStream version 9 template.

Use undo ip netstream export v9-template refresh-rate to restore the default.

Syntax

ip netstream export v9-template refresh-rate { packet packets | time minutes }

undo ip netstream export v9-template refresh-rate { packet | time }

Default

The packet count-based refresh rate is 20 packets, and the time-based refresh interval is 30 minutes.

Views

System view

Predefined user roles

network-admin

Parameters

packets: Specifies the number of packets that are sent before the template is sent. The value range is 1 to 600.

time minutes: Specifies the interval at which the template is sent, in the range of 1 to 3600 minutes.

Usage guidelines

Version 9 is template-based and supports user-defined formats. A NetStream device must send the version 9 template to NetStream servers regularly, because the servers do not permanently save the template.

The refresh rate can be packet count-based or time-based. If both settings are configured, the template is sent when either of the conditions is met.

Examples

# Configure the device to send the Netstream version 9 template to NetStream servers every 100 packets.

<Sysname> system-view

[Sysname] ip netstream export v9-template refresh-rate packet 100

ip netstream export version

Use ip netstream export version 5 to export NetStream data in the version 5 format and choose whether to record AS information.

Use ip netstream export version 9 to export NetStream data in the version 9 format and choose whether to record AS and BGP next hop information.

Use undo ip netstream export version to restore the default.

Syntax

ip netstream export version 5 { origin-as | peer-as }

ip netstream export version 9 { origin-as | peer-as } [ bgp-nexthop ]

undo ip netstream export version

Default

NetStream traditional data export uses the version 9 format. The peer AS numbers are exported. The BGP next hop is not recorded.

Views

System view

Predefined user roles

network-admin

Parameters

origin-as: Records the source AS of the source address and the destination AS of the destination address.

peer-as: Records the ASs before and after the AS where the NetStream device resides as the source AS and destination AS, respectively.

bgp-nexthop: Records BGP next hops.

Usage guidelines

A NetStream entry records the source IP address and destination IP address, and two AS numbers for each IP address. You can choose to configure which AS numbers are to be exported as the source AS and destination AS.

Recoding BGP next hop data is supported only by the version 9 format.

Only one version format can take effect on the device. If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Configure the device to export NetStream data in the version 5 format and specify the NetStream data to include the source AS and destination AS.

<Sysname> system-view

[Sysname] ip netstream export version 5 origin-as

ip netstream filter

Use ip netstream filter to enable NetStream filtering on an interface.

Use undo ip netstream filter to disable NetStream filtering on an interface.

Syntax

ip netstream { inbound | outbound } filter acl ipv4-acl-number

undo ip netstream { inbound | outbound } filter

Default

NetStream filtering is disabled. NetStream collects statistics about all IPv4 packets passing through an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Filters incoming traffic.

outbound: Filters outgoing traffic.

acl ipv4-acl-number: Specifies an IPv4 ACL by its number. The value range is 2000 to 2999 for basic ACLs, 3000 to 3999 for advanced ACLs, and 4000 to 4999 for Layer 2 ACLs.

Usage guidelines

NetStream filtering uses an ACL to identify intended packets.

· If you want to collect data for specific flows, use the ACL permit statements to identify the flows. NetStream collects data only for these flows.

· If you do not want to collect data for specific flows, use the ACL deny statements to identify the flows. NetStream does not collect data for these flows.

Examples

# Use ACL 2003 for outbound NetStream filtering on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] ip netstream outbound

[Sysname-GigabitEthernet1/0/1] ip netstream outbound filter acl 2003

ip netstream ipsec raw-packet

Use ip netstream ipsec raw-packet to enable NetStream for outgoing packets before IPsec encapsulation.

Use undo ip netstream ipsec raw-packet to restore the default.

Syntax

ip netstream ipsec raw-packet

undo ip netstream ipsec raw-packet

Default

NetStream is enabled for outgoing IPsec encapsulated packets.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only after you enable NetStream in the outbound direction of the interface.

Examples

# Enable NetStream for outgoing packets before IPsec encapsulation on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] ip netstream outbound

[Sysname-GigabitEthernet1/0/1] ip netstream ipsec raw-packet

ip netstream max-entry

Use ip netstream max-entry to set the upper limit for NetStream entries or specify the processing method when the upper limit is reached.

Use undo ip netstream max-entry to restore the default.

Syntax

ip netstream max-entry { max-entries | aging | disable-caching }

undo ip netstream max-entry

Default

A maximum of 10000 NetStream entries can be cached.

Views

System view

Predefined user roles

network-admin

Parameters

max-entries: Specifies the upper limit for NetStream entries that the cache can accommodate.The value range for this argument is 1000 to 100000.

aging: Ages out the oldest entries when the upper limit is reached.

disable-caching: Disables creation of a new entry when the upper limit is reached.

Usage guidelines

The max-entries argument takes effect on each card.

If you execute the ip netstream max-entry max-entries command multiple times, the most recent configuration takes effect.

If you execute the ip netstream max-entry { aging | disable-caching } command multiple times, the most recent configuration takes effect.

Examples

# Set the upper limit to 5000 for NetStream entries.

<Sysname> system-view

[Sysname] ip netstream max-entry 5000

# Disable creation of a new entry when the upper limit is reached.

<Sysname> system-view

[Sysname] ip netstream max-entry disable-caching

# Configure the device to age out the oldest entries when the upper limit is reached.

<Sysname> system-view

[Sysname] ip netstream max-entry aging

ip netstream mirror-to

Use ip netstream mirror-to to mirror traffic of an interface to a slot.

Use undo ip netstream mirror-to to restore the default.

Syntax

In standalone mode:

ip netstream { inbound | outbound } mirror-to service slot slot-number [ backup slot slot-number ]

undo ip netstream { inbound | outbound } mirror-to

In IRF mode:

ip netstream { inbound | outbound } mirror-to service chassis chassis-number slot slot-number [ backup chassis chassis-number slot slot-number ]

undo ip netstream { inbound | outbound } mirror-to

Default

Traffic passing through an interface is not mirrored.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Mirrors incoming traffic.

outbound: Mirrors outgoing traffic.

slot slot-number: Specifies the active NetStream module by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies an active NetStream module in an IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot where the NetStream module resides. (In IRF mode.)

backup slot slot-number: Specifies the standby NetStream module by its slot number. If you do not specify this option, no standby NetStream module is configured. (In standalone mode.)

backup chassis chassis-number slot slot-number: Specifies the standby NetStream module in an IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot where the NetStream module resides. (In IRF mode.)

Usage guidelines

Traffic is mirrored to the standby slot only if the active slot fails. After the active slot is resumed, traffic is mirrored to the active slot again.

Examples

# Mirror incoming traffic on GigabitEthernet 1/0/1 to slot 3.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] ip netstream inbound mirror-to service slot 3

ip netstream mpls

Use ip netstream mpls to enable MPLS packet statistics collection.

Use undo ip netstream mpls to disable MPLS packet statistics collection.

Syntax

ip netstream mpls [ label-positions label-position1 [ label-position2 [ label-position3 ] ] ] [ no-ip-fields ]

undo ip netstream mpls

Default

MPLS packet statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

label-positions: Specifies position of the labels to be counted.

label-position1: Specifies the position of the first label in the label stack, in the range of 1 to 6.

label-position2: Specifies the position of the second label in the label stack, in the range of 1 to 6.

label-position3: Specifies the position of the third label in the label stack, in the range of 1 to 6.

no-ip-fields: Specifies not to count IP fields.

Usage guidelines

This command enables statistics collection of MPLS packets for both IPv4 and IPv6 NetStream.

If you do not specify any keywords or options, the top label and IP fields are counted.

If multiple labels are to be counted, the label positions specified cannot be the same and are in ascending order.

Examples

# Enable NetStream for MPLS packets with top label counted but without IP fields.

<Sysname> system-view

[Sysname] ip netstream mpls no-ip-fields

Related commands

display ip netstream cache

ip netstream sampler

Use ip netstream sampler to enable NetStream sampling.

Use undo ip netstream sampler to disable NetStream sampling.

Syntax

ip netstream [ inbound | outbound ] sampler sampler-name

undo ip netstream [ inbound | outbound ] sampler

Default

NetStream sampling is disabled.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Enables NetStream sampling in the inbound direction.

outbound: Enables NetStream sampling in the outbound direction.

sampler sampler-name: Specifies a sampler by its name. The name is a case-insensitive string of 1 to 31 characters.

Usage guidelines

If you configure this command without specifying a traffic direction, NetStream sampling is enabled on the interface for both inbound and outbound traffic.

Examples

# Use sampler abc for inbound NetStream sampling on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] ip netstream inbound

[Sysname-GigabitEthernet1/0/1] ip netstream inbound sampler abc

ip netstream timeout active

Use ip netstream timeout active to set the aging timer for active flows.

Use undo ip netstream timeout active to restore the default.

Syntax

ip netstream timeout active minutes

undo ip netstream timeout active

Default

The aging timer is 30 minutes for active flows.

Views

System view

Predefined user roles

network-admin

Parameters

minutes: Sets the aging timer for active flows, in the range of 1 to 60 minutes.

Usage guidelines

A flow is considered active if packets for the NetStream entry arrive before the timer set by this command expires.

Examples

# Set the aging timer to 60 minutes for active flows.

<Sysname> system-view

[Sysname] ip netstream timeout active 60

Related commands

ip netstream timeout inactive

Use ip netstream timeout inactive to set the aging timer for inactive flows.

Use undo ip netstream timeout inactive to restore the default.

Syntax

ip netstream timeout inactive seconds

undo ip netstream timeout inactive

Default

The aging timer is 30 seconds for inactive flows.

Views

System view

Predefined user roles

network-admin

Parameters

seconds: Sets the aging timer for inactive flows, in the range of 10 to 600 seconds.

Usage guidelines

A flow is considered inactive if no packet for the NetStream entry arrives before the timer set by this command expires.

Examples

# Set the aging timer to 60 seconds for inactive flows.

<Sysname> system-view

[Sysname] ip netstream timeout inactive 60

Related commands

ip netstream timeout active

reset ip netstream statistics

Use reset ip netstream statistics to clear the NetStream cache and export the cached entries to NetStream servers.

Syntax

reset ip netstream statistics

Views

User view

Predefined user roles

network-admin

Usage guidelines

It takes the system several minutes to execute the command. During this period, the system does not collect NetStream data.

Examples

# Clear the NetStream cache and export the cached data to NetStream servers.

<Sysname> reset ip netstream statistics

This process may take a few minutes.

Netstream statistic function is disabled during this process.

15-Network Management and Monitoring Command Reference

NetStream commands

display ip netstream export

ip netstream aging

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us