11-Network Management and Monitoring Command Reference

HomeSupportResource CenterSwitchesS12500X-AF SeriesS12500X-AF SeriesTechnical DocumentsReference GuidesCommand ReferencesH3C S12500X-AF Switch Series Command References(R28xx)-6W10011-Network Management and Monitoring Command Reference
14-NetStream commands
Title Size Download
14-NetStream commands 145.89 KB

NetStream commands

NetStream is supported on the following interface modules on the S12500X-AF switch series:

·     HF interface modules.

·     The following HB interface modules:

¡     LSXM1TGS48C2HB1.

¡     LSXM1TGS48HB1.

¡     LSXM1QGS48HB1.

¡     LSXM1CGQ18QGHB1.

¡     LSXM1CGQ36HB1.

display ip netstream cache

Use display ip netstream cache to display NetStream entry information.

Syntax

In standalone mode:

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-ip | interface interface-type interface-number | source source-ip ] * [ slot slot-number ]

In IRF mode:

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-ip | interface interface-type interface-number | source source-ip ] * [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

verbose: Displays detailed information about NetStream entries. If you do not specify this keyword, this command displays brief information about NetStream entries.

type: Specifies the NetStream entry type. If you do not specify this keyword, this commands displays information about all types of NetStream entries.

ip: Specifies Layer 3 NetStream entries.

ipl2: Specifies Layer 2 and Layer 3 NetStream entries.

l2: Specifies Layer 2 NetStream entries.

mpls: Specifies MPLS NetStream entries.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6, representing labels from the outermost to the innermost. The value range for the label-value3 argument is 0 to 1048575.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

interface interface-type interface-number: Specifies an interface by its type and number.

source source-ip: Specifies a source IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information about NetStream entries for all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information about NetStream entries for all cards. (In IRF mode.)

Usage guidelines

The types of NetStream entries for flow packets vary by the export template version and whether the flow packets contain IP headers.

·     If the version 9 or version 10 template is used:

¡     The type of the NetStream entry is ipl2 (Layer 2 and Layer 3) for flow packets containing IP headers.

¡     The type of the Netstream entry is l2 (Layer 2) for flow packets without IP headers.

·     If the version 5 template is used:

¡     The type of the NetStream entry is ip (Layer 3) for flow packets containing IP headers.

¡     The type of the NetStream entry is l2 (Layer 2) for flow packets without IP headers.

Examples

# Display detailed information about NetStream entries.

<Sysname> display ip netstream cache verbose

IP NetStream cache information:

  Active flow timeout             : 5 min

  Inactive flow timeout           : 300 sec

  Max number of entries           : 1048576

  IP active flow entries          : 1

  MPLS active flow entries        : 2

  L2 active flow entries          : 1

  IPL2 active flow entries        : 1

  IP flow entries counted         : 10

  MPLS flow entries counted       : 20

  L2 flow entries counted         : 10

  IPL2 flow entries counted       : 20

  Last statistics resetting time  : 01/01/2000 at 00:01:02

 

IP packet size distribution (1103746 packets in total):

1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480

.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

 

 512  544  576 1024 1536 2048 2560 3072 3584 4096 4608 >4608

.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000

 

Protocol          Total Packets    Flows  Packets Active(sec) Idle(sec)

                  Flows /sec       /sec   /flow   /flow       /flow

--------------------------------------------------------------------------

TCP-Telnet      2656855     372        4       86          49        27

TCP-FTP         5900082      86        9        9          11        33

TCP-FTPD        3200453    1006        5      193          45        33

TCP-WWW       546778274   11170      887       12           8        32

TCP-other      49148540    3752       79       47          30        32

UDP-DNS       117240379     570      190        3           7        34

UDP-other      45502422    2272       73       30           8        37

ICMP           14837957     125       24        5          12        34

IP-other          77406       5        0       47          52        27

 

Type DstIP(Port)         SrcIP(Port)            Pro ToS VNI   If(Direct)  Pkts

     DstMAC(VLAN)        SrcMAC(VLAN)

     TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP   11.1.1.1(1024)      11.1.1.2(21)           6   128 10    FGE1/0/1(I) 42996

     TCPFlag:      27

     DstMask:      24       SrcMask:      24       NextHop:      0.0.0.0

     DstAS:         0       SrcAS:         0       BGPNextHop:   0.0.0.0

     InVRF:        10

     SamplerMode:   2       SamplerInt:  256

     Active:  120.600       Bytes/Pkt:   152

     First packet arrived: 10/28/2013, 14:10:03

     Last packet arrived:  10/28/2013, 14:21:03

L2   0012-3f86-e94c(10)     0012-3f86-e86a(0)                 FGE1/0/1(I) 1253

     SamplerMode:   2       SamplerInt:   64

     Active:    5.510       Bytes/Pkt:   210

     First packet arrived: 10/28/2013, 14:10:00

     Last packet arrived:  10/28/2013, 14:21:03

MPLS LDP(3.3.3.3/24)        1:18-6-0                          FGE1/0/2(O) 291

                            2:24-6-0

                            3:30-6-1

     SamplerMode:   0       SamplerInt:    0

     Active:  660.084       Bytes/Pkt:   100

     First packet arrived: 10/28/2013, 14:10:01

     Last packet arrived:  10/28/2013, 14:21:03

IP&  192.168.123.1(2048) 192.168.1.1(0)         1    0   N/A   FGE1/0/2(O) 10

L2   0012-3f86-e95d(0)      0012-3f86-e116(1008)

     TCPFlag:      27

     DstMask:      24       SrcMask:      24       NextHop:    192.168.1.2

     DstAS:         0       SrcAS:         0       BGPNextHop: 0.0.0.0

     OutVRF:        0       TCPFlag:    0

     SamplerMode:   0       SamplerInt:    0

     Active:   12.030       Bytes/Pkt:    86

     First packet arrived: 10/28/2013, 14:10:04

     Last packet arrived:  10/28/2013, 14:21:03

IP&  172.16.1.1(68)      172.16.2.1(67)         17  64   N/A   FGE1/0/3(I) 1848

MPLS LDP(4.4.4.4/24)        1:55-6-0

                            2:16-6-1

     TCPFlag:       0

     DstMask:      24       SrcMask:      24       NextHop:    172.16.2.10

     DstAS:         0       SrcAS:         0       BGPNextHop: 0.0.0.0

     InVRF:         0

     SamplerMode:   0       SamplerInt:    0

     Active:  382.542       Bytes/Pkt:  1426

     First packet arrived: 10/28/2013, 14:12:03

     Last packet arrived:  10/28/2013, 14:23:03

Table 1 Command output

Field

Description

Active flow timeout

Aging timer for active flows, in minutes.

Inactive flow timeout

Aging timer for inactive flows, in seconds.

Max number of entries

Maximum number of flows allowed in the cache.

IP active flow entries

Number of active IP flows in the cache.

MPLS active flow entries

Number of active MPLS flows in the cache.

L2 active flow entries

Number of active Layer 2 flows in the cache.

IPL2 active flow entries

Number of active Layer 2 and Layer 3 flows in the cache.

IP flow entries counted

Number of IP flows that have been counted.

MPLS flow entries counted

Number of MPLS flows that have been counted.

L2 flow entries counted

Number of Layer 2 flows that have been counted.

IPL2 flow entries counted

Number of Layer 2 and Layer 3 flows that have been counted.

Last statistics resetting time

Last time the reset ip netstream statistics command was executed. This field displays Never if you have never executed this command.

IP packet size distribution (1103746 packets in total)

Distribution of IP packets by packet size, and the bracketed number is the total number of IP packets.

The value is displayed in the proportion of the number of IP packets of the specified sizes to the total number of IP packets, and the value is displayed with 3 decimal places.

1-32   64   96  128  160  192  224  256  288

320  352  384  416  448  480 512  544  576

1024 1536 2048 2560 3072 3584 4096 4608

Range of IP packet length (excluding data link layer header) in bytes.

·     For the values in the range of 1 to 576, the range increases in the step of 32. For example, 1-32 shows the number of packets with the size of 1 to 32 bytes. 64 shows the number of packets with the size of 33 to 64 bytes.

·     For the values greater than 1024, the range increases in the step of 512. For example, 1536 shows the number of packets with the size of 1025 to 1536 bytes.

·     Packets with the size of 577 to 1024 bytes are recorded in the 1024 entry.

Protocol     Total Flows     Packets /sec

Flows/sec   Packets/flow

Active(sec)/flow     Idle(sec)/flow

Statistics of packets by protocol type:

·     Protocol type.

·     Total number of flows.

·     Number of packets per second.

·     Number of flows per second.

·     Number of packets per flow.

·     Active time (in seconds) of each flow.

·     Inactive time (in seconds) of each flow.

Type DstIP(Port)            SrcIP(Port)            Pro ToS VNI If(Direct)  Pkts

Statistics of the active flows in the current cache:

·     Flow type. Flows are classified into the following types:

¡     Layer 3 flows.

¡     Layer 2 flows.

¡     Layer 2 and Layer 3 flows.

¡     MPLS flows without IP options.

¡     MPLS flows with IP options.

·     Destination IP address (destination port).

·     Source IP address (source port).

·     Protocol number.

·     ToS.

·     VXLAN ID. The VNI field displays N/A for non-VXLAN packets and on VXLAN-incapable devices.

·     Interface name (direction).

·     Number of packets.

ICMP packets do not contain port number fields, so the type and code fields are captured. The value for the destination port represents these two fields:

·     The highest 8 bits represent the type field.

·     The lowest 8 bits represent the code field.

The value for the source port is set to 0 and does not indicate any statistics.

DstMAC(VLAN)          SrcMAC(VLAN)

Layer 2 information of the active flows in the current cache:

·     Destination MAC address, followed by the destination VLAN ID in parenthesis.

·     Source MAC address, followed by the source VLAN ID in parenthesis.

TopLblType(IP/Mask)      Lbl-Exp-S-List

Information about the active MPLS flows in the current cache:

·     Type of the labels at the top of the label stack:

¡     IP address associated with the label.

¡     Mask associated with the label.

·     Label list.

Up to three labels can be listed in one label list.

TCPFlag:

DstMask:      SrcMask:             NextHop:

DstAS:           SrcAS:            BGPNextHop:

OutVRF:       InVRF:

SamplerMode:                     SamplerInt:

Active:       Bytes/Pkt:

First packet arrived:

Last packet arrived:

Other information about the active flows in the cache:

·     TCP tag.

·     Destination mask.

·     Source mask.

·     Routing next hop.

·     Destination AS.

·     Source AS.

·     BGP next hop.

·     VPN instance to which the outbound packets belong.

·     VPN instance to which the inbound packets belong.

·     Sampling mode. Supported sampling modes are:

¡     0—No sampling.

¡     2—Random sampling.

·     Sampling interval.

·     Flow's active time.

·     Number of bytes per packet.

·     Arrival time of the first packet of the flow.

·     Arrival time of the last packet of the flow.

display ip netstream export

Use display ip netstream export to display information about the NetStream data export.

Syntax

display ip netstream export

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

IP NetStream export information varies by aggregation mode. This command displays IP NetStream export information for all the configured aggregation modes.

Examples

# Display information about the NetStream data export.

<Sysname> display ip netstream export

IP export information:

  Flow source interface                              : FortyGigE1/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  5 exported flow number                    : 16

  Version  5 exported UDP datagram number (failed)   : 16 (0)

  Version  9 exported flow number                    : 20

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

 

 

MPLS export information:

  Flow source interface                              : FortyGigE1/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  9 exported flow number                    : 20

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

 

protocol-port aggregation export information:

  Flow source interface                              : FortyGigE1/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  8 exported flow number                    : 16

  Version  8 exported UDP datagram number (failed)   : 2 (0)

  Version  9 exported flow number                    : 16

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

Table 2 Command output

Field

Description

IP export information

NetStream data export information.

Flow source interface

Source interface from which the NetStream data is exported.

Flow destination VPN instance

VPN to which the destination address of the NetStream data export belongs.

Flow destination IP address (UDP)

Destination IP address and UDP port number of the NetStream data export.

Version  5 exported flow number

Number of flows that are exported in version 5 format.

Version  5 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 5 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

Version  9 exported flow number

Number of flows that are exported in version 9 format.

Version  9 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 9 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

MPLS export information

Information about MPLS flows exported in version 9 format.

L2 export information

Statistics of the Layer 2 data export.

protocol-port aggregation export information

Statistics of NetStream protocol-port aggregation in version 8 format.

Version  8 exported flow number

Number of flows that are exported in version 8 format.

Version  8 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 8 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

Version 10 exported flow number

Number of flows that are exported in version 10 format.

Version 10 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 10 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

display ip netstream template

Use display ip netstream template to display NetStream template information.

Syntax

In standalone mode:

display ip netstream template [ slot slot-number ]

In IRF mode:

display ip netstream template [ chassis chassis-number slot slot-number  ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays NetStream template information for the active MPU. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays NetStream template information for the global active MPU. (In IRF mode.)

Usage guidelines

IP NetStream templates vary by aggregation mode. This command displays IP NetStream template information for all the configured aggregation modes.

Examples

# Display NetStream template information.

<Sysname> display ip netstream template

 Flow template refresh frequency            : 20

 Flow template refresh interval             : 30 min

 Active flow templates                      : 2

 Created flow templates                     : 2

 

Protocol-port outbound template:

 Template ID                : 3258

 Field count                : 14

 Field type                   Field length (bytes)

---------------------------------------------------------------------------

 Flows                        4

 Out packets                  8

 Out bytes                    8

 First forwarded              4

 Last forwarded               4

 Protocol                     1

 Direction                    1

 PAD                          1

 PAD                          1

 L4 source port               2

 L4 destination port          2

 Sampling algorithm           1

 PAD                          1

 PAD                          1

 PAD                          1

 Sampling interval            4

 

Protocol-port inbound template:

 Template ID                : 3257

 Field count                : 14

 Field type                   Field length (bytes)

---------------------------------------------------------------------------

 Flows                        4

 In packets                   8

 In bytes                     8

 First forwarded              4

 Last forwarded               4

 Protocol                     1

 Direction                    1

 PAD                          1

 PAD                          1

 L4 source port               2

 L4 destination port          2

 Sampling algorithm           1

 PAD                          1

 PAD                          1

 PAD                          1

 Sampling interval            4

Table 3 Command output

Field

Description

Flow template refresh frequency

Refresh frequency at which the templates are sent, in packets.

Flow template refresh interval

Refresh interval at which the templates are sent, in minutes.

Active flow templates

Number of active NetStream templates.

Created flow templates

Number of templates that have been created.

Protocol-port outbound template

Information of the protocol-port template in the outbound direction.

Protocol-port inbound template

Information of the protocol-port template in the inbound direction.

Packets

Number of packets sent by using the template.

Last template export time

Time when the template was last exported.

Field count

Total number of fields in a template.

Field type

Type of a field in the template.

Flows

Number of aggregate flows.

Out packets

Number of sent packets.

 

In packets

Number of received packets.

 

Out bytes

Size of sent packets, in bytes.

 

In bytes

Size of received packets, in bytes.

 

First forwarded

System time when the first packet was forwarded, accurate to milliseconds.

Last forwarded

System time when the last packet was forwarded, accurate to milliseconds.

L4 source port

Source UDP or TCP port.

L4 destination port

Destination UDP or TCP port.

PAD

Padding string.

Sampling interval

Sampling rate.

enable

Use enable to enable a NetStream aggregation mode.

Use undo enable to disable a NetStream aggregation mode.

Syntax

enable

undo enable

Default

No NetStream aggregation mode is enabled.

Views

NetStream aggregation mode view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable NetStream destination-prefix aggregation mode.

<Sysname> system-view

[Sysname] ip netstream aggregation destination-prefix

[Sysname-ns-aggregation-dstpre] enable

Related commands

ip netstream aggregation

ip netstream

Use ip netstream to enable NetStream on an interface.

Use undo ip netstream to disable NetStream on an interface.

Syntax

ip netstream { inbound | outbound }

undo ip netstream { inbound | outbound }

Default

NetStream is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

inbound: Enables NetStream for incoming traffic.

outbound: Enables NetStream for outgoing traffic.

Examples

# Enable NetStream for incoming traffic on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] ip netstream inbound

ip netstream aggregation

Use ip netstream aggregation to specify a NetStream aggregation mode and enter its view.

Use undo ip netstream aggregation to remove the configuration for a NetStream aggregation mode.

Syntax

ip netstream aggregation { destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

undo ip netstream aggregation { destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

Default

No NetStream aggregation mode is specified.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

destination-prefix: Specifies the destination-prefix aggregation by destination AS number, destination address mask length, destination prefix, and outbound interface index.

prefix: Specifies the source and destination prefix aggregation by the following criteria:

·     Source AS number.

·     Destination AS number.

·     Source address mask length.

·     Destination address mask length.

·     Source prefix.

·     Destination prefix.

·     Inbound interface index.

·     Outbound interface index.

prefix-port: Specifies the prefix-port aggregation by the following criteria:

·     Source prefix.

·     Destination prefix.

·     Source address mask length.

·     Destination address mask length.

·     ToS.

·     Protocol number.

·     Source port.

·     Destination port.

·     Inbound interface index.

·     Outbound interface index.

protocol-port: Specifies the protocol-port aggregation by protocol number, source port, and destination port.

source-prefix: Specifies the source-prefix aggregation by source AS number, source address mask length, source prefix, and inbound interface index.

tos-destination-prefix: Specifies the ToS-destination-prefix aggregation by ToS, destination AS number, destination address mask length, destination prefix, and outbound interface index.

tos-prefix: Specifies the ToS-prefix aggregation by the following criteria:

·     ToS.

·     Source AS number.

·     Source prefix.

·     Source address mask length.

·     Destination AS number.

·     Destination address mask length.

·     Destination prefix.

·     Inbound interface index.

·     Outbound interface index.

tos-protocol-port: Specifies the ToS-protocol-port aggregation by ToS, protocol number, source port, destination port, inbound interface index, and outbound interface index.

tos-source-prefix: Specifies the ToS-source-prefix aggregation by ToS, source AS number, source prefix, source address mask length, and inbound interface index.

Usage guidelines

In NetStream aggregation mode view, you can perform the following tasks:

·     Enable or disable the specified NetStream aggregation mode.

·     Configure source interface, destination IP address, and destination port for the NetStream data export.

A flow matching multiple aggregation modes is counted as multiple aggregate flows.

Examples

# Set the NetStream aggregation mode to destination-prefix, and enter NetStream destination-prefix aggregation mode view.

<Sysname> system-view

[Sysname] ip netstream aggregation destination-prefix

[Sysname-ns-aggregation-dstpre]

Related commands

enable

ip netstream export host

ip netstream export source

ip netstream export host

Use ip netstream export host to specify a destination host for NetStream data export.

Use undo ip netstream export host to remove the specified destination host or all destination hosts that are configured in the current view.

Syntax

ip netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

undo ip netstream export host [ ip-address [ vpn-instance vpn-instance-name ] ]

Default

No destination host is specified for NetStream data export.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies the destination IP address.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination host belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option.

Usage guidelines

You can specify the same destination IP address and UDP port in different NetStream aggregation mode views. If an aggregation mode is not enabled, the display ip netstream export command cannot display the destination host configuration for the mode.

If no destination host is specified in a NetStream aggregation mode view, the destination host in system view applies. If destination hosts are specified in a NetStream aggregation view and system view, the destination hosts in aggregation view take effect.

You can specify a maximum of four destination hosts in system view or a NetStream aggregation mode view. If you specify a destination host with the same IP address but different UDP ports in the same view, the most recent configuration takes effect. You can specify destination hosts with the same IP address and UDP port but different VPN instances.

NetStream traditional data is exported to all destination hosts in system view. NetStream aggregation data is exported to all destination hosts in the related NetStream aggregation mode view. If you expect only the aggregation data, specify destination hosts only in the NetStream aggregation mode view. Aggregation data export reduces bandwidth usage.

Examples

# In system view, specify 172.16.105.48 as the IP address of the destination host and UDP port 5000 as the export destination port number.

<Sysname> system-view

[Sysname] ip netstream export host 172.16.105.48 5000

Related commands

ip netstream aggregation

ip netstream export source

ip netstream export rate

Use ip netstream export rate to limit the NetStream data export rate.

Use undo ip netstream export rate to restore the default.

Syntax

ip netstream export rate rate

undo ip netstream export rate

Default

The export rate of NetStream data is not limited.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

rate: Specifies the export rate in the range of 1 to 1000.

Usage guidelines

This command sets the maximum number of NetStream packets that can be exported per second. Packets that cannot be exported due to the export rate limit are buffered for later export. When the buffer is full, the system will temporarily invalidate the rate limit and export packets as fast as possible until the buffer has space for new packets.

Examples

# Allow a maximum of 10 packets to be exported per second.

<Sysname> system-view

[Sysname] ip netstream export rate 10

ip netstream export source

Use ip netstream export source to specify the source interface for data packets sent to NetStream servers.

Use undo ip netstream export source to restore the default.

Syntax

ip netstream export source interface interface-type interface-number

undo ip netstream export source

Default

The packets take the IP address of the output interface as the source IP address.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-type interface-number: Specifies a source interface by its type and number.

Usage guidelines

The IP address of the specified source interface is used as the source IP address for packets sent to NetStream servers.

You can configure different source interfaces in different NetStream aggregation mode views.

If no source interface is configured in a NetStream aggregation mode view, the source interface in system view applies.

Examples

# In system view, specify FortyGigE 1/0/1 as the source interface for NetStream traditional data packets.

<Sysname> system-view

[Sysname] ip netstream export source interface fortygige 1/0/1

# In destination-prefix aggregation mode view, specify FortyGigE 1/0/2 as the source interface for NetStream aggregation data packets.

<Sysname> system-view

[Sysname] ip netstream aggregation destination-prefix

[Sysname-ns-aggregation-dstpre] ip netstream export source interface fortygige 1/0/2

Related commands

ip netstream aggregation

ip netstream export template refresh-rate

Use ip netstream export template refresh-rate to set the refresh rate for the NetStream version 9 or version 10 template.

Use undo ip netstream export template refresh-rate to restore the default.

Syntax

ip netstream export template refresh-rate { packet packets | time minutes }

undo ip netstream export template refresh-rate { packet | time }

Default

The packet count-based refresh rate is 20 packets, and the time-based refresh interval is 30 minutes.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

packets: Specifies the number of packets that are sent before the template is sent. The value range is 1 to 600.

time minutes: Specifies the interval at which the template is sent, in the range of 1 to 3600 minutes.

Usage guidelines

Version 9 and version 10 are template-based and support user-defined formats. A NetStream device must send the version 9 or version 10 template to NetStream servers regularly, because the servers do not permanently save the templates.

The refresh rate can be packet count-based or time-based. If both settings are configured, the template is sent when either of the conditions is met.

Examples

# Configure the device to send the Netstream version 9 or version 10 template to NetStream servers every 100 packets.

<Sysname> system-view

[Sysname] ip netstream export template refresh-rate packet 100

ip netstream export version

Use ip netstream export version 5 to export NetStream data in the version 5 format and choose whether to record AS information.

Use ip netstream export version 9 to export NetStream data in the version 9 format and choose whether to record AS and BGP next hop information.

Use ip netstream export version 10 to export NetStream data in the version 10 format and choose whether to record AS and BGP next hop information.

Use undo ip netstream export version to restore the default.

Syntax

ip netstream export version 5 { origin-as | peer-as }

ip netstream export version { 9 | 10 } { origin-as | peer-as } [ bgp-nexthop ]

undo ip netstream export version

Default

NetStream traditional data export uses the version 9 format. The peer AS numbers are exported. The BGP next hop is not recorded.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

origin-as: Records the source AS of the source address and the destination AS of the destination address.

peer-as: Records the ASs before and after the AS where the NetStream device resides as the source AS and destination AS, respectively.

bgp-nexthop: Records BGP next hops.

Usage guidelines

A NetStream entry records the source IP address and destination IP address, and two AS numbers for each IP address. You can choose to configure which AS numbers are to be exported as the source AS and destination AS.

Only version 9 and version 10 formats support recoding BGP next hop data.

Only one version format can take effect on the device. If you execute the command multiple times, the most recent configuration takes effect.

If the version 5 format is configured, the NetStream aggregation data export uses the version 8 format.

If the version 9 format is configured, the NetStream aggregation data export uses the version 9 format.

If the version 10 format is configured, the NetStream aggregation data export uses the version 10 format.

Examples

# Configure the device to export NetStream data in the version 5 format and specify the NetStream data to include the source AS and destination AS.

<Sysname> system-view

[Sysname] ip netstream export version 5 origin-as

ip netstream filter

Use ip netstream filter to enable NetStream filtering on an interface.

Use undo ip netstream filter to disable NetStream filtering on an interface.

Syntax

ip netstream { inbound | outbound } filter acl ipv4-acl-number

undo ip netstream { inbound | outbound } filter

Default

NetStream filtering is disabled. NetStream collects statistics about all IPv4 packets passing through an interface.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

inbound: Filters incoming traffic.

outbound: Filters outgoing traffic.

acl ipv4-acl-number: Specifies an IPv4 ACL by its number. The value range is 2000 to 2999 for basic ACLs, 3000 to 3999 for advanced ACLs, and 4000 to 4999 for Layer 2 ACLs.

Usage guidelines

NetStream filtering uses an ACL to identify intended packets.

·     If you want to collect data for specific flows, use the ACL permit statements to identify the flows. NetStream collects data only for these flows.

·     If you do not want to collect data for specific flows, use the ACL deny statements to identify the flows. NetStream does not collect data for these flows.

If you use NetStream filtering on the interface where IPv4 and IPv6 NetStream are enabled in the same direction, make sure NetStream filtering is enabled for both IPv4 and IPv6 in this direction. For more information about IPv6 NetStream, see Network Management and Monitoring Configuration Guide.

Outbound NetStream filtering does not take effect on MPLS or VXLAN packets.

Examples

# Use ACL 2003 for inbound NetStream filtering on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] ip netstream inbound

[Sysname-FortyGigE1/0/1] ip netstream inbound filter acl 2003

ip netstream gre inner-packet

Use ip netstream gre inner-packet to enable NetStream statistics collection for the payload packets in GRE-tunneled packets.

Use undo ip netstream gre inner-packet to disable NetStream statistics collection for the payload packets in GRE-tunneled packets.

Syntax

ip netstream gre inner-packet

undo ip netstream gre inner-packet

Default

NetStream statistics collection is disabled for the payload packets in GRE-tunneled packets.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This feature enables NetStream to collect statistics about the source IP address, destination IP address, protocol number, source port number, and destination port number of the payload packets in GRE-tunneled packets.

Examples

# Enable NetStream statistics collection for the payload packets in GRE-tunneled packets.

<Sysname> system-view

[Sysname] ip netstream gre inner-packet

Related commands

display ip netstream cache

ip netstream max-entry

Use ip netstream max-entry to set the upper limit for NetStream entries.

Use undo ip netstream max-entry to restore the default.

Syntax

ip netstream max-entry max-entries

undo ip netstream max-entry

Default

A maximum of 1048576 NetStream entries can be cached.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

max-entries: Specifies the upper limit for NetStream entries that the cache can accommodate. The value range for this argument is 1000 to 2000000.

Usage guidelines

The max-entries argument takes effect on each card.

If you execute the ip netstream max-entry max-entries command multiple times, the most recent configuration takes effect.

Examples

# Set the upper limit to 5000 for NetStream entries.

<Sysname> system-view

[Sysname] ip netstream max-entry 5000

ip netstream mpls

Use ip netstream mpls to enable MPLS packet statistics collection.

Use undo ip netstream mpls to disable MPLS packet statistics collection.

Syntax

ip netstream mpls [ label-positions label-position1 [ label-position2 [ label-position3 ] ] ] [ no-ip-fields ]

undo ip netstream mpls

Default

MPLS packet statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

label-positions: Specifies position of the labels to be counted.

label-position1: Specifies the position of the first label in the label stack, in the range of 1 to 6.

label-position2: Specifies the position of the second label in the label stack, in the range of 1 to 6.

label-position3: Specifies the position of the third label in the label stack, in the range of 1 to 6.

no-ip-fields: Specifies not to count IP fields.

Usage guidelines

This command enables statistics collection of MPLS packets for both IPv4 and IPv6 NetStream.

If you do not specify any keywords or options, the top label and IP fields are counted.

If multiple labels are to be counted, the label positions specified cannot be the same and are in ascending order.

Examples

# Enable NetStream for MPLS packets with top label counted but without IP fields.

<Sysname> system-view

[Sysname] ip netstream mpls no-ip-fields

Related commands

display ip netstream cache

ip netstream sampler

Use ip netstream sampler to enable NetStream sampling.

Use undo ip netstream sampler to disable NetStream sampling.

Syntax

ip netstream { inbound | outbound } sampler sampler-name

undo ip netstream { inbound | outbound } sampler

Default

NetStream sampling is enabled and the sampling rate is 2 to the 15th power.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

inbound: Enables NetStream sampling in the inbound direction.

outbound: Enables NetStream sampling in the outbound direction.

sampler sampler-name: Specifies a sampler by its name. The name is a case-insensitive string of 1 to 31 characters.

Usage guidelines

By default, NetStream collects all data of target flows. If the flow traffic is heavy, NetStream is resource-consuming and can cause high CPU usage, which impacts the device forwarding performance. NetStream sampling is helpful to decrease the NetStream traffic volume. If the collected statistics can basically reflect the network status, you can enable this feature and set a proper sampling rate. The higher the sampling rate, the less impact on device performance.

Examples

# Use sampler abc for inbound NetStream sampling on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] ip netstream inbound

[Sysname-FortyGigE1/0/1] ip netstream inbound sampler abc

ip netstream timeout active

Use ip netstream timeout active to set the aging timer for active flows.

Use undo ip netstream timeout active to restore the default.

Syntax

ip netstream timeout active minutes

undo ip netstream timeout active

Default

The aging timer is 5 minutes for active flows.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

minutes: Sets the aging timer for active flows, in the range of 1 to 20 minutes.

Usage guidelines

A flow is considered active if packets for the NetStream entry arrive before the timer set by this command expires.

Examples

# Set the aging timer to 5 minutes for active flows.

<Sysname> system-view

[Sysname] ip netstream timeout active 4

Related commands

ip netstream timeout inactive

ip netstream timeout inactive

Use ip netstream timeout inactive to set the aging timer for inactive flows.

Use undo ip netstream timeout inactive to restore the default.

Syntax

ip netstream timeout inactive seconds

undo ip netstream timeout inactive

Default

The aging timer is 300 seconds for inactive flows.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Sets the aging timer for inactive flows, in the range of 10 to 320 seconds.

Usage guidelines

A flow is considered inactive if no packet for the NetStream entry arrives before the timer set by this command expires.

Examples

# Set the aging timer to 320 seconds for inactive flows.

<Sysname> system-view

[Sysname] ip netstream timeout inactive 320

Related commands

ip netstream timeout active

ip netstream vxlan udp-port

Use ip netstream vxlan udp-port to enable VXLAN packet statistics collection.

Use undo ip netstream vxlan udp-port to disable VXLAN packet statistics collection.

Syntax

ip netstream vxlan udp-port port-number

undo ip netstream vxlan udp-port

Default

VXLAN packet statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

port-number: Specifies the destination UDP port number carried in VXLAN packets. The value range is 1 to 65535.

Usage guidelines

The value of the port-number argument must be the same as the destination UDP port number carried in the VXLAN packets.

With VXLAN packet statistics collection enabled, NetStream collects statistics about VXLAN packets that carry the specified destination UDP port number. To view the VXLAN packet statistics, see the VNI field in the display ip netstream cache command output.

For more information about VXLAN packets, see VXLAN Configuration Guide.

Examples

# Enable NetStream to collect statistics for VXLAN packets that carry destination UDP port number 2.

<Sysname> system-view

[Sysname] ip netstream vxlan udp-port 2

Related commands

display ip netstream cache

netstream key

Use netstream key to set the NetStream flow classification key fields.

Use netstream key to restore the default.

Syntax

netstream key [ destination-ip | destination-mac | destination-port | flow-label | ip-tos | mpls-experimental1 | mpls-experimental2 | mpls-experimental3 | mpls-label1 | mpls-label2 | mpls-label3 | protocol | source-ip | source-mac | source-port | vxlan-destination-ip | vxlan-destination-mac | vxlan-destination-port | vxlan-flow-label | vxlan-ip-tos | vxlan-protocol | vxlan-source-ip | vxlan-source-mac | vxlan-source-port ] *

undo netstream key

Default

Key fields used for NetStream flow classification are destination-ip, destination-mac, protocol, source-ip and source-mac.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

destination-ip: Uses the destination IP address as a flow classification key field.

destination-mac: Uses the destination MAC address as a flow classification key field.

destination-port: Uses the destination port number as a flow classification key field.

flow-label: Uses the flow label of the IPv6 packet as a flow classification key field.

ip-tos: Uses the ToS value in the IP header as a flow classification key field.

mpls-experimental1: Uses the EXP value in the second label of the MPLS packet as a flow classification key field.

mpls-experimental2: Uses the EXP value in the first (topmost) label of the MPLS packet as a flow classification key field.

mpls-experimental3: Uses the EXP value in the third label of the MPLS packet as a flow classification key field.

mpls-label1: Uses the first (topmost) label of the MPLS packet as a flow classification key field.

mpls-label2: Uses the second label of the MPLS packet as a flow classification key field.

mpls-label3: Uses the third label of the MPLS packet as a flow classification key field.

protocol: Uses the protocol type as a flow classification key field.

source-ip: Uses the source IP address as a flow classification key field.

source-mac: Uses the source MAC address as a flow classification key field.

source-port: Uses the source port number as a flow classification key field.

vxlan-destination-ip: Uses the destination IP address in the VXLAN inner packet as a flow classification key field.

vxlan-destination-mac: Uses the destination MAC address in the VXLAN inner packet as a flow classification key field.

vxlan-destination-port: Uses the destination port number in the VXLAN inner packet as a flow classification key field.

vxlan-flow-label: Uses the IPv6 flow label in the VXLAN inner packet as a flow classification key field.

vxlan-ip-tos: Uses the IP ToS value in the VXLAN inner packet as a flow classification key field.

vxlan-protocol: Uses the protocol in the VXLAN inner packet as a flow classification key field.

vxlan-source-ip: Uses the source IP address in the VXLAN inner packet as a flow classification key field.

vxlan-source-mac: Uses the source MAC address in the VXLAN inner packet as a flow classification key field.

vxlan-source-port: Uses the source port number in the VXLAN inner packet as a flow classification key field.

Usage guidelines

By default, the hardware classifies packets into NetStream flows based on these key fields: source and destination IP addresses, source and destination MAC addresses, and protocol. Packets matching the same key fields are grouped into one flow and sent to NetStream regularly for further tracking.

You can set the flow classification key fields to suit specific traffic monitoring requirements. For example, if you are concerned with only the traffic destination, you can set the destination IP address as the flow classification key field. All packets destined for the same IP address are classified into one flow.

After you set the NetStream flow classification key fields, statistics about the non-key fields are no longer collected.

To collect MPLS traffic flows, make sure one or more of the following fields are set as the key fields (choose the key fields according to the MPLS packet structure):

·     mpls-experimental1.

·     mpls-experimental2.

·     mpls-experimental3.

·     mpls-label1.

·     mpls-label2.

·     mpls-label3.

To collect VXLAN traffic flows, make sure the following fields are set as the key fields:

·     source-port.

·     destination-port.

·     protocol.

·     One or more of the following fields:

¡     vxlan-destination-ip.

¡     vxlan-destination-mac.

¡     vxlan-destination-port.

¡     vxlan-flow-label.

¡     vxlan-ip-tos.

¡     vxlan-protocol.

¡     vxlan-source-ip.

¡     vxlan-source-mac.

¡     vxlan-source-port.

Examples

# Set the source IP address, destination IP address, source port number, destination port number, protocol, and ToS value as the NetStream flow classification key fields.

<Sysname>system-view

[Sysname] netstream key source-ip destination-ip source-port destination-port protocol ip-tos

Related commands

ip netstream mpls

ip netstream vxlan udp-port

reset ip netstream statistics

Use reset ip netstream statistics to clear the NetStream cache and export the cached entries to NetStream servers.

Syntax

reset ip netstream statistics

Views

User view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

It takes the system several minutes to execute the command. During this period, the system does not collect NetStream data.

Examples

# Clear the NetStream cache and export the cached data to NetStream servers.

<Sysname> reset ip netstream statistics

This process may take a few minutes.

Netstream statistic function is disabled during this process.

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网