Table of Contents

Related Documents

12-NetStream commands

Title	Size	Download
12-NetStream commands	164.57 KB

NetStream commands

display ip netstream cache

Use display ip netstream cache to display NetStream entry information.

Syntax

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-ip | destination-port destination-port | interface interface-type interface-number | protocol protocol | source source-ip | source-port source-port ] * [ arrived-time start-date start-time end-date end-time ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

verbose: Displays detailed information about NetStream entries. If you do not specify this keyword, this command displays brief information about NetStream entries.

type: Specifies the NetStream entry type. If you do not specify this keyword, this commands displays information about all types of NetStream entries.

ip: Specifies Layer 3 NetStream entries.

ipl2: Specifies Layer 2 and Layer 3 NetStream entries.

l2: Specifies Layer 2 NetStream entries.

mpls: Specifies MPLS NetStream entries.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value3 argument is 0 to 1048575.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

destination-port destination-port: Specifies a destination port number in the range of 0 to 65535. If you specify this option, this command does not display Layer 2 NetStream entries.

interface interface-type interface-number: Specifies an interface by its type and number.

protocol protocol: Specifies a protocol by its number in the range of 0 to 255 or by its name such as GRE, OSPF, TCP, or UDP. If you specify this option, this command does not display Layer 2 NetStream entries.

source source-ip: Specifies a source IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

source-port source-port: Specifies a source port number in the range of 0 to 65535. If you specify this option, this command does not display Layer 2 NetStream entries.

arrived-time: Specifies an arrived time range to display NetStream entries. If you do not specify this keyword, the arrived time is not used as a criterion for filtering the NetStream entries to be displayed.

start-date: Specifies the start date in the format of MM/DD/YYYY or YYYY/MM/DD, where MM is in the range of 1 to 12 and YYYY is in the range of 2000 to 2035. The value range for DD varies by the value of MM.

start-time: Specifies the start time in the format of HH:MM:SS, where HH is in the range of 0 to 23, MM and SS are in the range of 0 to 59. The SS element can be omitted if its value is 00. Both the SS and MM elements can be omitted if their values are 0. For example, the start time of 0 indicates 00:00:00.

end-date: Specifies the end date in the format of MM/DD/YYYY or YYYY/MM/DD, where MM is in the range of 1 to 12 and YYYY is in the range of 2000 to 2035. The value range for DD varies by the value of MM.

end-time: Specifies the end time in the format of HH:MM:SS, where HH is in the range of 0 to 23, MM and SS are in the range of 0 to 59. The SS element can be omitted if its value is 00. Both the SS and MM elements can be omitted if their values are 0. For example, the end time of 0 indicates 00:00:00.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information about NetStream entries on all cards.

Examples

# Display detailed information about NetStream entries.

<Sysname> display ip netstream cache verbose

IP NetStream cache information:

Active flow timeout : 5 min

Inactive flow timeout : 300 sec

Max number of entries : 1000

IP active flow entries : 1

MPLS active flow entries : 1

L2 active flow entries : 0

IPL2 active flow entries : 0

IP flow entries counted : 10

MPLS flow entries counted : 20

L2 flow entries counted : 10

IPL2 flow entries counted : 20

Last statistics resetting time : 01/01/2000 at 00:01:02

IP packet size distribution (1103746 packets in total):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608

.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000

Protocol Total Packets Flows Packets Active(sec) Idle(sec)

Flows /sec /sec /flow /flow /flow

--------------------------------------------------------------------------

TCP-Telnet 2656855 372 4 86 49 27

TCP-FTP 5900082 86 9 9 11 33

TCP-FTPD 3200453 1006 5 193 45 33

TCP-WWW 546778274 11170 887 12 8 32

TCP-other 49148540 3752 79 47 30 32

UDP-DNS 117240379 570 190 3 7 34

UDP-other 45502422 2272 73 30 8 37

ICMP 14837957 125 24 5 12 34

IP-other 77406 5 0 47 52 27

Type DstIP(Port) SrcIP(Port) Pro ToS VNI If(Direct) Pkts

DstMAC(VLAN) SrcMAC(VLAN)

TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP 11.1.1.1(1024) 11.1.1.2(21) 6 128 10 GE1/0/1(I) 42996

TCPFlag: 27

DstMask: 24 SrcMask: 24 NextHop: 0.0.0.0

DstAS: 0 SrcAS: 0 BGPNextHop: 0.0.0.0

InVRF: vpn2

Bgp-community1: 0

Bgp-community2: 0

Bgp-community3: 0

Bgp-community4: 0

SamplerMode:Random SamplerInt: 256

Active: 5.600 Bytes/Pkt: 152

First packet arrived: 10/28/2013, 14:10:03

Last packet arrived: 10/28/2013, 14:21:03

IP& 172.16.1.1(68) 172.16.2.1(67) 17 64 N/A GE1/0/3(I) 1848

MPLS LDP(4.4.4.4/24) 1:55-6-0

2:16-6-1

TCPFlag: 0

DstMask: 24 SrcMask: 24 NextHop: 172.16.2.10

DstAS: 0 SrcAS: 0 BGPNextHop: 0.0.0.0

InVRF: vpn1

Bgp-community1: 0

Bgp-community2: 0

Bgp-community3: 0

Bgp-community4: 0

SamplerMode:N/A SamplerInt: 0

Active: 5.542 Bytes/Pkt: 1426

First packet arrived: 10/28/2013, 14:12:03

Last packet arrived: 10/28/2013, 14:23:03

# Display detailed information about NetStream entries.

<Sysname> display ip netstream cache verbose

IP NetStream cache information:

Active flow timeout : 60 min

Inactive flow timeout : 10 sec

Max number of entries : 1000

IP active flow entries : 1

MPLS active flow entries : 2

L2 active flow entries : 1

IPL2 active flow entries : 1

IP flow entries counted : 10

MPLS flow entries counted : 20

L2 flow entries counted : 10

IPL2 flow entries counted : 20

Last statistics resetting time : 01/01/2000 at 00:01:02

IP packet size distribution (1103746 packets in total):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608

.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000

Protocol Total Packets Flows Packets Active(sec) Idle(sec)

Flows /sec /sec /flow /flow /flow

--------------------------------------------------------------------------

TCP-Telnet 2656855 372 4 86 49 27

TCP-FTP 5900082 86 9 9 11 33

TCP-FTPD 3200453 1006 5 193 45 33

TCP-WWW 546778274 11170 887 12 8 32

TCP-other 49148540 3752 79 47 30 32

UDP-DNS 117240379 570 190 3 7 34

UDP-other 45502422 2272 73 30 8 37

ICMP 14837957 125 24 5 12 34

IP-other 77406 5 0 47 52 27

Type DstIP(Port) SrcIP(Port) Pro ToS VNI If(Direct) Pkts

DstMAC(VLAN) SrcMAC(VLAN)

TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP 11.1.1.1(1024) 11.1.1.2(21) 6 128 N/A Vlan1 (I) 42996

TCPFlag: 27

DstMask: 24 SrcMask: 24 NextHop: 0.0.0.0

DstAS: 0 SrcAS: 0 BGPNextHop: 0.0.0.0

InVRF: vpn2

Bgp-community1: 0

Bgp-community2: 0

Bgp-community3: 0

Bgp-community4: 0

SamplerMode:Random SamplerInt: 256

Active: 5.600 Bytes/Pkt: 152

First packet arrived: 10/28/2013, 14:10:03

Last packet arrived: 10/28/2013, 14:21:03

L2 0012-3f86-e94c(10) 0012-3f86-e86a(0) Vlan1(I) 1253

Active: 5.510 Bytes/Pkt: 210

First packet arrived: 10/28/2013, 14:10:00

Last packet arrived: 10/28/2013, 14:21:03

MPLS LDP(3.3.3.3/24) 1:18-6-0 Vlan2(O) 291

2:24-6-0

3:30-6-1

SamplerMode:N/A SamplerInt: 0

Active: 5.084 Bytes/Pkt: 100

First packet arrived: 10/28/2013, 14:10:01

Last packet arrived: 10/28/2013, 14:21:03

IP& 192.168.123.1(2048) 192.168.1.1(0) 1 0 N/A Vlan2(O) 10

L2 0012-3f86-e95d(0) 0012-3f86-e116(1008)

TCPFlag: 27

DstMask: 24 SrcMask: 24 NextHop: 192.168.1.2

DstAS: 0 SrcAS: 0 BGPNextHop: 0.0.0.0

OutVRF: vpn1 InVRF: 0

Bgp-community1: 0

Bgp-community2: 0

Bgp-community3: 0

Bgp-community4: 0

SamplerMode:N/A SamplerInt: 0

Active: 5030 Bytes/Pkt: 86

First packet arrived: 10/28/2013, 14:10:04

Last packet arrived: 10/28/2013, 14:21:03

IP& 172.16.1.1(68) 172.16.2.1(67) 17 64 N/A Vlan3(I) 1848

MPLS LDP(4.4.4.4/24) 1:55-6-0

2:16-6-1

TCPFlag: 0

DstMask: 24 SrcMask: 24 NextHop: 172.16.2.10

DstAS: 0 SrcAS: 0 BGPNextHop: 0.0.0.0

InVRF: vpn1

Bgp-community1: 0

Bgp-community2: 0

Bgp-community3: 0

Bgp-community4: 0

SamplerMode:N/A SamplerInt: 0

Active: 5.542 Bytes/Pkt: 1426

First packet arrived: 10/28/2013, 14:12:03

Last packet arrived: 10/28/2013, 14:23:03

Table 1 Command output

Field	Description
Active flow timeout	Aging timer for active flows, in minutes.
Inactive flow timeout	Aging timer for inactive flows, in seconds.
Max number of entries	Maximum number of flows allowed in the cache.
IP active flow entries	Number of active IP flows in the cache.
MPLS active flow entries	Number of active MPLS flows in the cache.
L2 active flow entries	Number of active Layer 2 flows in the cache.
IPL2 active flow entries	Number of active Layer 2 and Layer 3 flows in the cache.
IP flow entries counted	Number of IP flows that have been counted.
MPLS flow entries counted	Number of MPLS flows that have been counted.
L2 flow entries counted	Number of Layer 2 flows that have been counted.
IPL2 flow entries counted	Number of Layer 2 and Layer 3 flows that have been counted.
Last statistics resetting time	Last time the reset ip netstream statistics command was executed. This field displays Never if you have never executed this command.
IP packet size distribution (1103746 packets in total)	Distribution of IP packets by packet size, and the bracketed number is the total number of IP packets. The value is displayed in the proportion of the number of IP packets of the specified sizes to the total number of IP packets, and the value is displayed with 3 decimal places.
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608	Range of IP packet length (excluding data link layer header) in bytes. · For the values in the range of 1 to 576, the range increases in the step of 32. For example, 1-32 shows the number of packets with the size of 1 to 32 bytes. 64 shows the number of packets with the size of 33 to 64 bytes. · For the values greater than 1024, the range increases in the step of 512. For example, 1536 shows the number of packets with the size of 1025 to 1536 bytes. · Packets with the size of 577 to 1024 bytes are recorded in the 1024 entry.
Protocol Total Flows Packets /sec Flows/sec Packets/flow Active(sec)/flow Idle(sec)/flow	Statistics of packets by protocol type: · Protocol type. · Total number of flows. · Number of packets per second. · Number of flows per second. · Number of packets per flow. · Active time (in seconds) of each flow. · Inactive time (in seconds) of each flow.
Type DstIP(Port) SrcIP(Port) Pro ToS VNI If(Direct) Pkts	Statistics of the active flows in the current cache: · Flow type. Flows are classified into the following types: ¡ Layer 3 flows. ¡ Layer 2 flows. ¡ Layer 2 and Layer 3 flows. ¡ MPLS flows without IP options. ¡ MPLS flows with IP options. · Destination IP address (destination port). · Source IP address (source port). · Protocol number. · ToS. · VXLAN ID. The VNI field displays N/A for non-VXLAN packets and on VXLAN-incapable devices. · Interface name (direction). · Number of packets. ICMP packets do not contain port number fields, so the type and code fields are captured. The value for the destination port represents these two fields: · The highest 8 bits represent the type field. · The lowest 8 bits represent the code field. The value for the source port is set to 0 and does not indicate any statistics.
DstMAC(VLAN) SrcMAC(VLAN)	Layer 2 information of the active flows in the current cache: · Destination MAC address, followed by the destination VLAN ID in parenthesis. · Source MAC address, followed by the source VLAN ID in parenthesis.
TopLblType(IP/Mask) Lbl-Exp-S-List	Information about the active MPLS flows in the current cache: · Type of the labels at the top of the label stack: ¡ IP address associated with the label. ¡ Mask associated with the label. · Label list. Up to three labels can be listed in one label list.
TCPFlag: DstMask: SrcMask: NextHop: DstAS: SrcAS: BGPNextHop: OutVRF: InVRF: Bgp-community1: Bgp-community2: Bgp-community3: Bgp-community4: SamplerMode: SamplerInt: Active: Bytes/Pkt: First packet arrived: Last packet arrived:	Other information about the active flows in the cache: · TCP tag. · Destination mask. · Source mask. · Routing next hop. · Destination AS. · Source AS. · BGP next hop. · VPN instance to which the outbound packets belong. · VPN instance to which the inbound packets belong. · BGP community number. · Sampling mode. NetStream supports the following sampling modes: ¡ N/A—No sampling. ¡ Random—Random sampling. · Sampling interval. · Flow's active time. · Number of bytes per packet. · Arrival time of the first packet of the flow. · Arrival time of the last packet of the flow.

display ip netstream export

Use display ip netstream export to display information about the NetStream data export.

Syntax

display ip netstream export [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays NetStream data export information on all cards.

Usage guidelines

IP NetStream export information varies by aggregation mode. This command displays IP NetStream export information for all the configured aggregation modes.

Examples

# Display information about the NetStream data export.

<Sysname> display ip netstream export

IP export information:

Flow source interface : HundredGigE1/0/1

Flow destination VPN instance : VPN1

Flow destination IP address (UDP) : 10.10.0.10 (30000)

Version 5 exported flow number : 0

Version 5 exported UDP datagram number (failed) : 0 (0)

Version 9 exported flow number : 20

Version 9 exported UDP datagram number (failed) : 2 (0)

Version 10 exported flow number : 0

Version 10 exported UDP datagram number (failed) : 0 (0)

MPLS export information:

Flow source interface : HundredGigE1/0/1

Flow destination VPN instance : VPN1

Flow destination IP address (UDP) : 10.10.0.10 (30000)

Version 9 exported flow number : 20

Version 9 exported UDP datagram number (failed) : 2 (0)

Version 10 exported flow number : 0

Version 10 exported UDP datagram number (failed) : 0 (0)

Table 2 Command output

Field	Description
IP export information	NetStream data export information.
Flow source interface	Source interface from which the NetStream data is exported.
Flow destination VPN instance	VPN to which the destination address of the NetStream data export belongs.
Flow destination IP address (UDP)	Destination IP address and UDP port number of the NetStream data export.
Version 5 exported flow number	Number of flows that are exported in version 5 format.
Version 5 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 5 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
Version 9 exported flow number	Number of flows that are exported in version 9 format.
Version 9 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 9 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
MPLS export information	Information about MPLS flows exported in version 9 format.
L2 export information	Statistics of the Layer 2 data export.
protocol-port aggregation export information	Statistics of NetStream protocol-port aggregation in version 8 format.
Version 8 exported flow number	Number of flows that are exported in version 8 format.
Version 8 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 8 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.
Version 10 exported flow number	Number of flows that are exported in version 10 format.
Version 10 exported UDP datagram number (failed)	Number of UDP packets that are sent in version 10 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

Related commands

ip netstream export host (system view)

ip netstream export host (NetStream aggregation mode view)

display ip netstream template

Use display ip netstream template to display NetStream template information.

Syntax

display ip netstream template [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays NetStream template information on the active MPU.

Usage guidelines

IP NetStream templates vary by aggregation mode. This command displays IP NetStream template information for all the configured aggregation modes.

Examples

# Display NetStream template information. The template is in the version 10 format and is compliant with the RFC 7011 template format.

<Sysname> display ip netstream template

Flow template refresh frequency : 1

Flow template refresh interval : 30 min

Active flow templates : 2

Created flow templates : 8

L3 outbound template:

Template ID : 3282

Packets : 0

Last template export time : Never

Field count : 29

Field type Field length (bytes)

------------------------------------------------------------------------------

Out packets 8

Out bytes 8

First forwarded 4

Last forwarded 4

Input interface index 4

Output interface index 4

Source IPv4 address 4

Destination IPv4 address 4

Next hop IPv4 address 4

Source AS 4

Destination AS 4

L4 source port 2

L4 destination port 2

IP protocol version 1

TCP flags 1

Protocol 1

Source ToS 1

Source address mask 1

Destination address mask 1

Direction 1

Forwarding status 1

Out VPN ID 2

Sampling algorithm 1

PAD 1

Sampling interval 4

VXLAN ID 4

App ID 4

Bgp-community 65535

VPN instance name 65535

L3 inbound template:

Template ID : 3281

Packets : 0

Last template export time : Never

Field count : 29

Field type Field length (bytes)

------------------------------------------------------------------------------

In packets 8

In bytes 8

First forwarded 4

Last forwarded 4

Input interface index 4

Output interface index 4

Source IPv4 address 4

Destination IPv4 address 4

Next hop IPv4 address 4

Source AS 4

Destination AS 4

L4 source port 2

L4 destination port 2

IP protocol version 1

TCP flags 1

Protocol 1

Source ToS 1

Source address mask 1

Destination address mask 1

Direction 1

Forwarding status 1

In VPN ID 2

Sampling algorithm 1

PAD 1

Sampling interval 4

VXLAN ID 4

App ID 4

Bgp-community 65535

VPN instance name 65535

Table 3 Command output

Field	Description
Flow template refresh frequency	Refresh frequency at which the templates are sent, in packets.
Flow template refresh interval	Refresh interval at which the templates are sent, in minutes.
Active flow templates	Number of active NetStream templates.
Created flow templates	Number of templates that have been created.
L3 outbound template	Information of the Layer 3 template in the outbound direction.
L3 inbound template	Information of the Layer 3 template in the inbound direction.
Packets	Number of packets sent by using the template.
Last template export time	Time when the template was last exported.
Field count	Total number of fields in the template.
Field type	Type of a field in the template.
Field length (bytes)	Length of the field, in bytes.
Out packets	Number of sent packets.
In packets	Number of received packets.
Out bytes	Size of sent packets, in bytes.
In bytes	Size of received packets, in bytes.
First forwarded	System time when the first packet was forwarded, accurate to milliseconds.
Last forwarded	System time when the last packet was forwarded, accurate to milliseconds.
TCP flags	TCP flag of the flow.
Protocol	Layer 4 protocol type.
Out VPN ID	Name of the VPN instance to which the egress interface of the packets belong.
In VPN ID	Name of the VPN instance to which the ingress interface of the packets belong. This field is supported only in version 10.
PAD	Padding string.
Sampling interval	Sampling rate.
VXLAN ID	VXLAN ID. This field is supported only in version 10.
App ID	Application ID.
Bgp-community	BGP community string. This field is supported only in version 10. If the NetStream template uses the H3C format, the fields Bgp-community1, Bgp-community2, Bgp-community3, and Bgp-community4 are displayed and each field length is 4 bytes. If the NetStream template uses the RFC 7011-compliant format, the field Bgp-community is displayed and the field length is up to 65535 bytes. To configure the RFC 7011-compliant NetStream template format, use the ip netstream template rfc7011 command.
VPN instance name	VPN instance name. If the packets belong to the public network, this field displays N/A.

enable

Use enable to enable a NetStream aggregation mode.

Use undo enable to disable a NetStream aggregation mode.

Syntax

enable

undo enable

Default

No NetStream aggregation mode is enabled.

Views

NetStream aggregation mode view

Predefined user roles

network-admin

Examples

# Enable NetStream BGP community aggregation mode.

<Sysname> system-view

[Sysname] ip netstream bgp-community

[Sysname-ns-aggregation-bgpcommunity] enable

Related commands

ip netstream aggregation

ip netstream

Use ip netstream to enable NetStream on an interface.

Use undo ip netstream to disable NetStream on an interface.

Syntax

ip netstream { inbound | outbound }

undo ip netstream { inbound | outbound }

Default

NetStream is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Enables NetStream for incoming traffic.

outbound: Enables NetStream for outgoing traffic.

Examples

# Enable NetStream for incoming traffic on HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] ip netstream inbound

ip netstream aggregation

Use ip netstream aggregation to specify a NetStream aggregation mode and enter its view.

Use undo ip netstream aggregation to remove the configuration for a NetStream aggregation mode.

Syntax

ip netstream aggregation { bgp-community | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

undo ip netstream aggregation { bgp-community | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

Default

No NetStream aggregation mode is specified.

Views

System view

Predefined user roles

network-admin

Parameters

bgp-community: Specifies the BGP community aggregation mode. It aggregates flows by inbound interface index, outbound interface index, and BGP community.

destination-prefix: Specifies the destination-prefix aggregation mode. It aggregates flows by destination AS number, destination address mask length, destination prefix, and outbound interface index.

prefix: Specifies the source and destination prefix aggregation mode. It aggregates flows by the following criteria:

· Source AS number.

· Destination AS number.

· Source address mask length.

· Destination address mask length.

· Source prefix.

· Destination prefix.

· Inbound interface index.

· Outbound interface index.

prefix-port: Specifies the prefix-port aggregation mode. It aggregates flows by the following criteria:

· Source prefix.

· Destination prefix.

· Source address mask length.

· Destination address mask length.

· ToS.

· Protocol number.

· Source port.

· Destination port.

· Inbound interface index.

· Outbound interface index.

protocol-port: Specifies the protocol-port aggregation mode. It aggregates flows by protocol number, source port, and destination port.

source-prefix: Specifies the source-prefix aggregation mode. It aggregates flows by source AS number, source address mask length, source prefix, and inbound interface index.

tos-destination-prefix: Specifies the ToS-destination-prefix aggregation mode. It aggregates flows by ToS, destination AS number, destination address mask length, destination prefix, and outbound interface index.

tos-prefix: Specifies the ToS-prefix aggregation mode. It aggregates flows by the following criteria:

· ToS.

· Source AS number.

· Source prefix.

· Source address mask length.

· Destination AS number.

· Destination address mask length.

· Destination prefix.

· Inbound interface index.

· Outbound interface index.

tos-protocol-port: Specifies the ToS-protocol-port aggregation mode. It aggregates flows by ToS, protocol number, source port, destination port, inbound interface index, and outbound interface index.

tos-source-prefix: Specifies the ToS-source-prefix aggregation mode. It aggregates flows by ToS, source AS number, source prefix, source address mask length, and inbound interface index.

Usage guidelines

In NetStream aggregation mode view, you can perform the following tasks:

· Enable or disable the specified NetStream aggregation mode.

· Configure source interface, destination IP address, and destination port for the NetStream data export.

A flow matching multiple aggregation modes is counted as multiple aggregate flows.

Examples

# Set the NetStream aggregation mode to BGP community, and enter NetStream BGP community aggregation mode view.

<Sysname> system-view

[Sysname] ip netstream aggregation bgp-community

[Sysname-ns-aggregation-bgpcommunity]

Related commands

enable

ip netstream export host

ip netstream export source

ip netstream export host (NetStream aggregation mode view)

Use ip netstream export host to specify a destination host for NetStream aggregation data export in a NetStream aggregation mode view.

Use undo ip netstream export host to remove the specified destination host or all destination hosts that are configured in a NetStream aggregation mode view.

Syntax

ip netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

undo ip netstream export host [ ip-address [ vpn-instance vpn-instance-name ] ]

Default

No destination host is specified in a NetStream aggregation mode view.

Views

NetStream aggregation mode view

Predefined user roles

network-admin

Parameters

ip-address: Specifies the destination IP address.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination host belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option.

Usage guidelines

If an aggregation mode is not enabled, the display ip netstream export command cannot display the destination host configuration for the mode.

If no destination host is specified in a NetStream aggregation mode view, the destination host in system view applies. If destination hosts are specified in a NetStream aggregation mode view and system view, the destination hosts in the aggregation mode view take effect.

You can specify the same destination IP address and UDP port in different NetStream aggregation mode views. Each NetStream aggregation mode view supports a maximum of four destination hosts. The device supports exporting NetStream data to multiple destination hosts for backup. Each destination host is identified by the combination of IP address, UDP port number, and network identifier (VPN instance or public network).

· Destination hosts on different VPN instances can use the same IP address and UDP port number.

· Within the same VPN instance or on the public network, each destination host must use a unique IP address. If you specify a destination host with the same IP address but different UDP port numbers, the most recent configuration takes effect.

NetStream aggregation data is exported to all destination hosts in the related NetStream aggregation mode view.

Examples

# In BGP community aggregation mode view, specify 172.16.105.48 as the IP address of the destination host and UDP port 5000 as the export destination port number.

<Sysname> system-view

[Sysname] ip netstream aggregation bgp-community

[Sysname-ns-aggregation-bgpcommunity] ip netstream export host 172.16.105.48 5000

Related commands

ip netstream aggregation

ip netstream export source

ip netstream export host (system view)

display ip netstream export

ip netstream export host (system view)

Use ip netstream export host to specify a destination host for NetStream data export in system view.

Use undo ip netstream export host to remove the specified destination host or all destination hosts that are specified in system view.

Syntax

ip netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ] [ slot slot-number ]

undo ip netstream export host [ ip-address [ vpn-instance vpn-instance-name ] ] [ slot slot-number ]

Default

No destination host is specified for NetStream data export in system view.

Views

System view

Predefined user roles

network-admin

Parameters

ip-address: Specifies the destination IP address.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command applies to all cards.

Usage guidelines

The system supports general and slot-specific destination hosts, and they can share the same IP address and port number. If both types of destination hosts are specified for one slot, the device prefers the slot-specific destination hosts for exporting NetStream data of that card. If no slot-specific destination host is specified for that slot, the device uses the general destination hosts for exporting NetStream data of the card.

You can specify a maximum of four destination hosts in system view. The device supports exporting NetStream traditional data to multiple destination hosts for backup. Each destination host is identified by the combination of the IP address, UDP port number, and network identifier (VPN instance or public network).

· Destination hosts on different VPN instances can use the same IP address and UDP port number.

In system view, the device supports a maximum of four destination hosts for each slot.

Examples

# In system view, specify 172.16.105.48 as the IP address of the destination host and UDP port 5000 as the destination port number.

<Sysname> system-view

[Sysname] ip netstream export host 172.16.105.48 5000

Related commands

ip netstream aggregation

ip netstream export source

ip netstream export host (NetStream aggregation mode view)

display ip netstream export

ip netstream export rate

Use ip netstream export rate to limit the NetStream data export rate.

Use undo ip netstream export rate to restore the default.

Syntax

ip netstream export rate rate

undo ip netstream export rate

Default

The export rate of NetStream data is not limited.

Views

System view

Predefined user roles

network-admin

Parameters

rate: Specifies the export rate in the range of 1 to 1000.

Usage guidelines

This command sets the maximum number of NetStream packets that can be exported per second. Packets that cannot be exported due to the export rate limit are buffered for later export. When the buffer is full, the system will temporarily invalidate the rate limit and export packets as fast as possible until the buffer has available free space.

Examples

# Allow a maximum of 10 packets to be exported per second.

<Sysname> system-view

[Sysname] ip netstream export rate 10

ip netstream export source

Use ip netstream export source to specify the source interface for data packets sent to NetStream servers. Use undo ip netstream export source to restore the default.

Syntax

ip netstream export source interface interface-type interface-number

undo ip netstream export source

Default

The packets take the IP address of the output interface as the source IP address.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies a source interface by its type and number.

Usage guidelines

The IP address of the specified source interface is used as the source IP address for packets sent to NetStream servers.

You can configure different source interfaces in different NetStream aggregation mode views.

If no source interface is configured in a NetStream aggregation mode view, the source interface in system view applies.

Examples

# In system view, specify HundredGigE 1/0/1 as the source interface for NetStream traditional data packets.

<Sysname> system-view

[Sysname] ip netstream export source interface hundredgige 1/0/1

# In BGP community aggregation mode view, specify HundredGigE 1/0/2 as the source interface for NetStream aggregation data packets.

<Sysname> system-view

[Sysname] ip netstream aggregation bgp-community

[Sysname-ns-aggregation-bgpcommunity] ip netstream export source interface hundredgige 1/0/2

Related commands

ip netstream aggregation

ip netstream export template refresh-rate

Use ip netstream export template refresh-rate to set the refresh rate for the NetStream version 9 or version 10 template.

Use undo ip netstream export template refresh-rate to restore the default.

Syntax

ip netstream export template refresh-rate { packet packets | time minutes }

undo ip netstream export template refresh-rate { packet | time }

Default

The packet count-based refresh rate is 20 packets, and the time-based refresh interval is 30 minutes.

Views

System view

Predefined user roles

network-admin

Parameters

packet packets: Specifies the number of packets that are sent before the template is sent. The value range is 1 to 600.

time minutes: Specifies the interval at which the template is sent, in the range of 1 to 3600 minutes.

Usage guidelines

Version 9 and version 10 are template-based and support user-defined formats. A NetStream device must send the version 9 or version 10 template to NetStream servers regularly, because the servers do not permanently save templates.

The refresh rate can be packet count-based or time-based. If both settings are configured, the template is sent when either of the conditions is met.

Examples

# Configure the device to send the NetStream version 9 or version 10 template to NetStream servers every 100 packets.

<Sysname> system-view

[Sysname] ip netstream export template refresh-rate packet 100

ip netstream export version

Use ip netstream export version 5 to export NetStream data in the version 5 format and configure AS export attribute.

Use ip netstream export version 9 to export NetStream data in the version 9 format and configure the AS and BGP next hop export attributes.

Use ip netstream export version 10 to export NetStream data in the version 10 format and configure the AS and BGP next hop export attributes.

Use undo ip netstream export version to restore the default.

Syntax

ip netstream export version 5 { origin-as | peer-as }

ip netstream export version { 9 | 10 } { origin-as | peer-as } [ bgp-nexthop ]

undo ip netstream export version

Default

NetStream data export uses the version 9 format.

The peer AS numbers are recorded.

The BGP next hop information is not recorded.

Views

System view

Predefined user roles

network-admin

Parameters

origin-as: Records the original AS numbers for the flow source and destination.

peer-as: Records the peer AS numbers for the flow source and destination.

bgp-nexthop: Records the BGP next hop information.

Usage guidelines

A NetStream entry records the source IP address and destination IP address, and two AS numbers for each IP address. You can choose to configure which AS numbers are to be exported as the source AS and destination AS.

Only the version 9 and version 10 formats support recoding BGP next hop information.

Only one version format can take effect on the device. If you execute this command multiple times, the most recent configuration takes effect.

If the version 5 format is used, the NetStream aggregation data export uses the version 8 format.

If the version 9 format is used, the NetStream aggregation data export uses the version 9 format.

If the version 10 format is used, the NetStream aggregation data export uses the version 10 format.

Examples

# Configure the device to export NetStream data in version 5 format and to specify the NetStream data to include the source AS and destination AS.

<Sysname> system-view

[Sysname] ip netstream export version 5 origin-as

ip netstream filter

Use ip netstream filter to enable NetStream filtering on an interface.

Use undo ip netstream filter to disable NetStream filtering on an interface.

Syntax

ip netstream { inbound | outbound } filter acl acl-number

undo ip netstream { inbound | outbound } filter

Default

NetStream filtering is disabled. NetStream collects statistics about all IPv4 packets passing through an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Filters incoming traffic.

outbound: Filters outgoing traffic.

acl acl-number: Specifies an ACL by its number. The following are available value ranges:

· 2000 to 2999 for basic ACLs.

· 3000 to 3999 for advanced ACLs.

· 4000 to 4999 for Layer 2 ACLs.

· 5000 to 5999 for user-defined ACLs.

Usage guidelines

NetStream filtering uses an ACL to identify intended packets.

· If you want to collect data for specific flows, use the ACL permit statements to identify the flows. NetStream collects data only for these flows.

· If you do not want to collect data for specific flows, use the ACL deny statements to identify the flows. NetStream does not collect data for these flows.

Examples

# Use ACL 2003 for outbound NetStream filtering on HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] ip netstream outbound

[Sysname-HundredGigE1/0/1] ip netstream outbound filter acl 2003

ip netstream max-entry

Use ip netstream max-entry to set the upper limit for NetStream entries.

Use undo ip netstream max-entry to restore the default.

Syntax

ip netstream max-entry max-entries

undo ip netstream max-entry

Default

A maximum of 1048576 NetStream entries can be cached.

Views

System view

Predefined user roles

network-admin

Parameters

max-entries: Specifies the upper limit for NetStream entries that the cache can accommodate. The value range for this argument is 1000 to 2000000.

Usage guidelines

If you execute the command multiple times, the most recent configuration takes effect.

The command applies to all modules on the device and takes effect as long as a module supports NetStream. If a module does not support NetStream, a message will be fed back.

Examples

# Set the upper limit to 5000 for NetStream entries.

<Sysname> system-view

[Sysname] ip netstream max-entry 5000

ip netstream mpls

Use ip netstream mpls to enable MPLS packet statistics collection.

Use undo ip netstream mpls to disable MPLS packet statistics collection.

Syntax

ip netstream mpls [ label-positions label-position1 [ label-position2 [ label-position3 ] ] ] [ no-ip-fields ]

undo ip netstream mpls

Default

MPLS packet statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

label-positions: Specifies position of the labels to be counted.

label-position1: Specifies the position of the first label in the label stack, in the range of 1 to 6.

label-position2: Specifies the position of the second label in the label stack, in the range of 1 to 6.

label-position3: Specifies the position of the third label in the label stack, in the range of 1 to 6.

no-ip-fields: Specifies not to count IP fields.

Usage guidelines

This command enables statistics collection of MPLS packets for both IPv4 and IPv6 NetStream.

If you do not specify any keywords or options, the top label and IP fields are counted.

If multiple labels are to be counted, the label positions specified cannot be the same and are in ascending order.

Examples

# Enable NetStream for MPLS packets with top label counted but without IP fields.

<Sysname> system-view

[Sysname] ip netstream mpls no-ip-fields

ip netstream sampler

Use ip netstream sampler to enable NetStream sampling.

Use undo ip netstream sampler to disable NetStream sampling.

Syntax

ip netstream { inbound | outbound } sampler sampler-name

undo ip netstream { inbound | outbound } sampler

Default

NetStream sampling is disabled.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Enables NetStream sampling in the inbound direction.

outbound: Enables NetStream sampling in the outbound direction.

sampler sampler-name: Specifies a sampler by its name. The name is a case-insensitive string of 1 to 31 characters.

Usage guidelines

If you configure this command without specifying a traffic direction, NetStream sampling is enabled on the interface for both inbound and outbound traffic.

Examples

# Use sampler abc for inbound NetStream sampling on HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] ip netstream inbound

[Sysname-HundredGigE1/0/1] ip netstream inbound sampler abc

ip netstream template rfc7011

Use ip netstream template rfc7011 to configure the RFC 7011-compliant NetStream template format.

Use undo ip netstream template rfc7011 to restore the default.

Syntax

ip netstream template rfc7011

undo ip netstream template rfc7011

Default

The NetStream template uses the H3C-defined template format.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command enables NetStream to use the template format defined by the RFC 7011 for data export. Make sure the NetStream template format on the device is consistent with that on the server.

This command applies to both IPv4 and IPv6 NetStream templates.

Examples

# Configure the RFC 7011-compliant NetStream template format.

<Sysname> system-view

[Sysname] ip netstream template rfc7011

ip netstream timeout active

Use ip netstream timeout active to set the aging timer for active flows.

Use undo ip netstream timeout active to restore the default.

Syntax

ip netstream timeout active minutes

undo ip netstream timeout active

Default

The aging timer is 5 minutes for active flows.

Views

System view

Predefined user roles

network-admin

Parameters

minutes: Sets the aging timer for active flows, in the range of 1 to 5 minutes.

Usage guidelines

A flow is considered active if packets for the NetStream entry arrive before the timer set by this command expires.

Examples

# Set the aging timer to 5 minutes for active flows.

<Sysname> system-view

[Sysname] ip netstream timeout active 5

Related commands

ip netstream timeout inactive

Use ip netstream timeout inactive to set the aging timer for inactive flows.

Use undo ip netstream timeout inactive to restore the default.

Syntax

ip netstream timeout inactive seconds

undo ip netstream timeout inactive

Default

The aging timer is 300 seconds for inactive flows.

Views

System view

Predefined user roles

network-admin

Parameters

seconds: Sets the aging timer for inactive flows, in the range of 10 to 320 seconds.

Usage guidelines

A flow is considered inactive if no packet for the NetStream entry arrives before the timer set by this command expires.

Examples

# Set the aging timer to 60 seconds for inactive flows.

<Sysname> system-view

[Sysname] ip netstream timeout inactive 60

Related commands

ip netstream timeout active

ip netstream vxlan udp-port

Use ip netstream vxlan udp-port to enable VXLAN packet statistics collection.

Use undo ip netstream vxlan udp-port to disable VXLAN packet statistics collection.

Syntax

ip netstream vxlan udp-port port-number

undo ip netstream vxlan udp-port

Default

VXLAN packet statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

port-number: Specifies the destination UDP port number carried in VXLAN packets. The value range is 1 to 65535.

Usage guidelines

The value of the port-number argument must be the same as the destination UDP port number carried in the VXLAN packets.

For information about the destination UDP port number for VXLAN packets, see VXLAN Configuration Guide.

Examples

# Enable NetStream to collect statistics for VXLAN packets that carry destination UDP port number 2.

<Sysname> system-view

[Sysname] ip netstream vxlan udp-port 2

netstream key

Use netstream key to set the NetStream flow classification key fields.

Use netstream key to restore the default.

Syntax

undo netstream key

Default

The destination-ip, destination-mac, protocol, source-ip, and source-mac key fields are used for NetStream flow classification.

Views

System view

Predefined user roles

network-admin

Parameters

destination-ip: Uses the destination IP address as a flow classification key field.

destination-mac: Uses the destination MAC address as a flow classification key field.

destination-port: Uses the destination port number as a flow classification key field.

flow-label: Uses the flow label of the IPv6 packet as a flow classification key field.

ip-tos: Uses the ToS value in the IP header as a flow classification key field.

mpls-experimental1: Uses the EXP value in the second label of the MPLS packet as a flow classification key field.

mpls-experimental2: Uses the EXP value in the first (topmost) label of the MPLS packet as a flow classification key field.

mpls-experimental3: Uses the EXP value in the third label of the MPLS packet as a flow classification key field.

mpls-label1: Uses the first (topmost) label of the MPLS packet as a flow classification key field.

mpls-label2: Uses the second label of the MPLS packet as a flow classification key field.

mpls-label3: Uses the third label of the MPLS packet as a flow classification key field.

protocol: Uses the protocol type as a flow classification key field.

source-ip: Uses the source IP address as a flow classification key field.

source-mac: Uses the source MAC address as a flow classification key field.

source-port: Uses the source port number as a flow classification key field.

vxlan-destination-ip: Uses the destination IP address in the VXLAN inner packet as a flow classification key field.

vxlan-destination-mac: Uses the destination MAC address in the VXLAN inner packet as a flow classification key field.

vxlan-destination-port: Uses the destination port number in the VXLAN inner packet as a flow classification key field.

vxlan-flow-label: Uses the IPv6 flow label in the VXLAN inner packet as a flow classification key field.

vxlan-ip-tos: Uses the IP ToS value in the VXLAN inner packet as a flow classification key field.

vxlan-protocol: Uses the protocol in the VXLAN inner packet as a flow classification key field.

vxlan-source-ip: Uses the source IP address in the VXLAN inner packet as a flow classification key field.

vxlan-source-mac: Uses the source MAC address in the VXLAN inner packet as a flow classification key field.

vxlan-source-port: Uses the source port number in the VXLAN inner packet as a flow classification key field.

Usage guidelines

By default, the hardware classifies packets into NetStream flows based on these key fields: source and destination IP addresses, source and destination MAC addresses, and protocol. Packets matching the same key fields are grouped into one flow and sent to NetStream regularly for further tracking.

You can set the flow classification key fields to suit specific traffic monitoring requirements. For example, if you are concerned with only the traffic destination, you can set the destination IP address as the flow classification key field. All packets destined for the same IP address are classified into one flow.

After you set the NetStream flow classification key fields, statistics about the non-key fields are no longer collected.

To collect MPLS traffic flows, make sure one or more of the following fields are set as the key fields (choose the key fields according to the MPLS packet structure):

· mpls-experimental1.

· mpls-experimental2.

· mpls-experimental3.

· mpls-label1.

· mpls-label2.

· mpls-label3.

To collect VXLAN traffic flows, make sure the following fields are set as the key fields:

· source-port.

· destination-port.

· protocol.

· One or more of the following fields:

¡ vxlan-destination-ip.

¡ vxlan-destination-mac.

¡ vxlan-destination-port.

¡ vxlan-flow-label.

¡ vxlan-ip-tos.

¡ vxlan-protocol.

¡ vxlan-source-ip.

¡ vxlan-source-mac.

¡ vxlan-source-port.

Examples

# Set the source IP address, destination IP address, source port number, destination port number, protocol, and ToS value as the NetStream flow classification key fields.

<Sysname>system-view

[Sysname] netstream key source-ip destination-ip source-port destination-port protocol ip-tos

Related commands

· ip netstream mpls

· ip netstream vxlan udp-port

reset ip netstream statistics

Use reset ip netstream statistics to age out all flows in the cache and export NetStream data.

Syntax

reset ip netstream statistics

Views

User view

Predefined user roles

network-admin

Usage guidelines

It takes the system several minutes to execute the command. During this period, the system does not collect NetStream data.

Examples

# Age out and export all NetStream data.

<Sysname> reset ip netstream statistics

This process may take a few minutes.

Netstream statistic function is disabled during this process.

11-Network Management and Monitoring Command Reference

NetStream commands

display ip netstream export

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us