21-Network Management and Monitoring Command Reference

HomeSupportReference GuidesCommand ReferencesH3C MSR1000[2600][3600] Routers Command Reference(V9)-R9119-6W10021-Network Management and Monitoring Command Reference
12-NetStream commands
Title Size Download
12-NetStream commands 158.69 KB

NetStream commands

display ip netstream cache

Use display ip netstream cache to display NetStream entry information.

Syntax

display ip netstream cache [ verbose ] [ type { ip | ipl2 | l2 | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-ip | interface interface-type interface-number | source source-ip ] * [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

verbose: Displays detailed information about NetStream entries. If you do not specify this keyword, this command displays brief information about NetStream entries.

type: Specifies the NetStream entry type. If you do not specify this keyword, this commands displays information about all types of NetStream entries.

ip: Specifies Layer 3 NetStream entries.

ipl2: Specifies Layer 2 and Layer 3 NetStream entries.

l2: Specifies Layer 2 NetStream entries.

mpls: Specifies MPLS NetStream entries.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6, representing labels from the top label to the bottom label. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6, representing labels from the top label to the bottom label. Do not specify the position that has been specified. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6, representing labels from the top label to the bottom label. Do not specify the position that has been specified. The value range for the label-value3 argument is 0 to 1048575.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

interface interface-type interface-number: Specifies an interface by its type and number.

source source-ip: Specifies a source IP address in dotted-decimal notation. If you specify this option, this command does not display Layer 2 NetStream entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information about NetStream entries for all cards.

Usage guidelines

The types of NetStream entries for flow packets vary by the export template version and whether the flow packets contain IP headers.

·     If the version 9 or version 10 template is used:

¡     The type of the NetStream entry is ipl2 (Layer 2 and Layer 3) for flow packets containing IP headers.

¡     The type of the Netstream entry is l2 (Layer 2) for flow packets without IP headers.

·     If the version 5 template is used:

¡     The type of the NetStream entry is ip (Layer 3) for flow packets containing IP headers.

¡     The type of the NetStream entry is l2 (Layer 2) for flow packets without IP headers.

Examples

# Display detailed information about NetStream entries.

<Sysname> display ip netstream cache verbose

IP NetStream cache information:

  Active flow timeout             : 60 min

  Inactive flow timeout           : 10 sec

  Max number of entries           : 1000

  IP active flow entries          : 1

  MPLS active flow entries        : 2

  L2 active flow entries          : 1

  IPL2 active flow entries        : 1

  IP flow entries counted         : 10

  MPLS flow entries counted       : 20

  L2 flow entries counted         : 10

  IPL2 flow entries counted       : 20

  Last statistics resetting time  : 01/01/2019 at 00:01:02

 

IP packet size distribution (1103746 packets in total):

1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480

.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

 

 512  544  576 1024 1536 2048 2560 3072 3584 4096 4608 >4608

.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000

 

Protocol          Total Packets    Flows  Packets Active(sec) Idle(sec)

                  Flows /sec       /sec   /flow   /flow       /flow

--------------------------------------------------------------------------

TCP-Telnet      2656855     372        4       86          49        27

TCP-FTP         5900082      86        9        9          11        33

TCP-FTPD        3200453    1006        5      193          45        33

TCP-WWW       546778274   11170      887       12           8        32

TCP-other      49148540    3752       79       47          30        32

UDP-DNS       117240379     570      190        3           7        34

UDP-other      45502422    2272       73       30           8        37

ICMP           14837957     125       24        5          12        34

IP-other          77406       5        0       47          52        27

 

Type DstIP(Port)         SrcIP(Port)            Pro ToS VNI   If(Direct)  Pkts

     DstMAC(VLAN)        SrcMAC(VLAN)

     TopLblType(IP/Mask) Lbl-Exp-S-List

--------------------------------------------------------------------------

IP   11.1.1.1(1024)      11.1.1.2(21)           6   128 10    GE1/0/1(I)  42996

     TCPFlag:      27

     DstMask:      24       SrcMask:      24       NextHop:      0.0.0.0

     DstAS:         0       SrcAS:         0       BGPNextHop:   0.0.0.0

     InVRF:        vpn1

     TTE ID(Local/Remote): 0x00000000/0x00000000

     SamplerMode:   2       SamplerInt:  256

     Active:  120.600       Bytes/Pkt:   152

     First packet arrived: 10/28/2019, 14:10:03

     Last packet arrived:  10/28/2019, 14:21:03

     SrcMac:  0010-9400-0001

     DstMac:  1019-65cd-859c

 

L2   0012-3f86-e94c(10)     0012-3f86-e86a(0)                 GE1/0/1(I)  1253

     SamplerMode:   2       SamplerInt:   64

     Active:    5.510       Bytes/Pkt:   210

     First packet arrived: 10/28/2019, 14:10:00

     Last packet arrived:  10/28/2019, 14:21:03

     SrcMac:  0012-3f86-e94c

     DstMac:  0012-3f86-e86a

MPLS LDP(3.3.3.3/24)        1:18-6-0                          GE1/0/2(O)  291

                            2:24-6-0

                            3:30-6-0

                            4:32-6-0

                            5:34-6-0

                            6:36-6-1

     SamplerMode:   0       SamplerInt:    0

     Active:  660.084       Bytes/Pkt:   100

     First packet arrived: 10/28/2019, 14:10:01

     Last packet arrived:  10/28/2019, 14:21:03

     SRv6 policy NID:      2150629378

     SrcMac:  0010-9400-0002

     DstMac:  1019-65cd-858c

IP&  192.168.123.1(2048) 192.168.1.1(0)         1    0   N/A   GE1/0/2(O)  10

L2   0012-3f86-e95d(0)      0012-3f86-e116(1008)

     TCPFlag:      27

     DstMask:      24       SrcMask:      24       NextHop:    192.168.1.2

     DstAS:         0       SrcAS:         0       BGPNextHop: 0.0.0.0

     OutVRF:        0       TCPFlag:    0

     SamplerMode:   0       SamplerInt:    0

     Active:   12.030       Bytes/Pkt:    86

     First packet arrived: 10/28/2019, 14:10:04

     Last packet arrived:  10/28/2019, 14:21:03

     SRv6 policy NID:      2150629379

     SrcMac:  0012-3f86-e95d

     DstMac:  0012-3f86-e116

IP&  172.16.1.1(68)      172.16.2.1(67)         17  64   N/A   GE1/0/3(I)  1848

MPLS LDP(4.4.4.4/24)        1:55-6-0

                            2:16-6-1

     TCPFlag:       0

     DstMask:      24       SrcMask:      24       NextHop:    172.16.2.10

     DstAS:         0       SrcAS:         0       BGPNextHop: 0.0.0.0

     InVRF:         N/A

     SamplerMode:   0       SamplerInt:    0

     Active:  382.542       Bytes/Pkt:  1426

     First packet arrived: 10/28/2019, 14:12:03

     Last packet arrived:  10/28/2019, 14:23:03

     SRv6 policy NID:      2150629380

     SrcMac:  0010-9400-0003

     DstMac:  1019-65cd-858d

Table 1 Command output

Field

Description

Active flow timeout

Aging timer for active flows, in minutes.

Inactive flow timeout

Aging timer for inactive flows, in seconds.

Max number of entries

Maximum number of flows allowed in the cache.

IP active flow entries

Number of active IP flows in the cache.

MPLS active flow entries

Number of active MPLS flows in the cache.

L2 active flow entries

Number of active Layer 2 flows in the cache.

IPL2 active flow entries

Number of active Layer 2 and Layer 3 flows in the cache.

IP flow entries counted

Number of IP flows that have been counted.

MPLS flow entries counted

Number of MPLS flows that have been counted.

L2 flow entries counted

Number of Layer 2 flows that have been counted.

IPL2 flow entries counted

Number of Layer 2 and Layer 3 flows that have been counted.

Last statistics resetting time

Last time the reset ip netstream statistics command was executed. This field displays Never if you have never executed this command.

IP packet size distribution (1103746 packets in total)

Distribution of IP packets by packet size, and the bracketed number is the total number of IP packets.

The value is displayed in the proportion of the number of IP packets of the specified sizes to the total number of IP packets, and the value is displayed with 3 decimal places.

1-32   64   96  128  160  192  224  256  288

320  352  384  416  448  480 512  544  576

1024 1536 2048 2560 3072 3584 4096 4608

Range of IP packet length (excluding data link layer header) in bytes.

·     For the values in the range of 1 to 576, the range increases in the step of 32. For example, 1-32 shows the number of packets with the size of 1 to 32 bytes. 64 shows the number of packets with the size of 33 to 64 bytes.

·     For the values greater than 1024, the range increases in the step of 512. For example, 1536 shows the number of packets with the size of 1025 to 1536 bytes.

·     Packets with the size of 577 to 1024 bytes are recorded in the 1024 entry.

Protocol     Total Flows     Packets /sec

Flows/sec   Packets/flow

Active(sec)/flow     Idle(sec)/flow

Statistics of packets by protocol type:

·     Protocol type.

·     Total number of flows.

·     Number of packets per second.

·     Number of flows per second.

·     Number of packets per flow.

·     Active time (in seconds) of each flow.

·     Inactive time (in seconds) of each flow.

Type DstIP(Port)            SrcIP(Port)            Pro ToS VNI If(Direct)  Pkts

Statistics of the active flows in the current cache:

·     Flow type. Flows are classified into the following types:

¡     Layer 3 flows.

¡     Layer 2 flows.

¡     Layer 2 and Layer 3 flows.

¡     MPLS flows without IP options.

¡     MPLS flows with IP options.

·     Destination IP address (destination port).

·     Source IP address (source port).

·     Protocol number.

·     ToS.

·     VXLAN ID. The VNI field displays N/A for non-VXLAN packets and on VXLAN-incapable devices.

·     Interface name (direction).

·     Number of packets.

ICMP packets do not contain port number fields, so the type and code fields are captured. The value for the destination port represents these two fields:

·     The highest 8 bits represent the type field.

·     The lowest 8 bits represent the code field.

The value for the source port is set to 0 and does not indicate any statistics.

DstMAC(VLAN)          SrcMAC(VLAN)

Layer 2 information of the active flows in the current cache:

·     Destination MAC address, followed by the destination VLAN ID in parenthesis.

·     Source MAC address, followed by the source VLAN ID in parenthesis.

TopLblType(IP/Mask) Lbl-Exp-S-List

Information about the active MPLS flows in the current cache:

·     Type of the labels at the top of the label stack:

¡     IP address associated with the label.

¡     Mask associated with the label.

·     Label list.

Up to six labels can be listed in one label list.

A label includes the following fields:

·     Label—20-bit label value.

·     EXP—3-bit traffic class, used for QoS.

·     S—1-bit bottom of stack flag.

TCPFlag:

DstMask:      SrcMask:             NextHop:

DstAS:           SrcAS:            BGPNextHop:

OutVRF:       InVRF:

TTE ID(Local/Remote):

SamplerMode:                     SamplerInt:

Active:       Bytes/Pkt:

First packet arrived:

Last packet arrived:

SRv6 policy NID:

SrcMac:

DstMac:

Other information about the active flows in the cache:

·     TCPFlag—TCP tag.

·     DstMask—Destination mask.

·     SrcMask—Source mask.

·     NextHop—Routing next hop.

·     DstAS—Destination AS.

·     SrcAS—Source AS.

·     BGPNextHop—BGP next hop.

·     OutVRF—VPN instance to which the outbound packets belong.

·     InVRF—VPN instance to which the inbound packets belong.

·     TTE ID(Local/Remote)—Local/Remote tunnel endpoint ID.

·     SamplerModeSampling mode. Supported sampling modes are:

¡     0—No sampling.

¡     1—Fixed sampling.

¡     2—Random sampling.

·     SamplerInt—Sampling interval.

·     Active—Flow's active time.

·     Bytes/Pkt—Number of bytes per packet.

·     First packet arrived—Arrival time of the first packet of the flow.

·     Last packet arrived—Arrival time of the last packet of the flow.

·     SRv6 policy NID—NHLFE entry index for the SRv6 TE Policy.

·     SrcMask—Source MAC address.

·     DstMask—Destination MAC address.

display ip netstream export

Use display ip netstream export to display information about the NetStream data export.

Syntax

display ip netstream export

Views

Any view

Predefined user roles

network-admin

network-operator

Usage guidelines

IP NetStream export information varies by aggregation mode. This command displays IP NetStream export information for all the configured aggregation modes.

Examples

# Display information about the NetStream data export.

<Sysname> display ip netstream export

IP export information:

  Flow source interface                              : GigabitEthernet0/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  5 exported flow number                    : 16

  Version  5 exported UDP datagram number (failed)   : 16 (0)

  Version  9 exported flow number                    : 20

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

 

IP export information:

  Flow source interface                              : GigabitEthernet0/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IPv6 address (UDP)                : 40::1 (30000)

  Version  5 exported flow number                    : 16

  Version  5 exported UDP datagram number (failed)   : 16 (0)

  Version  9 exported flow number                    : 20

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

 

MPLS export information:

  Flow source interface                              : GigabitEthernet0/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  9 exported flow number                    : 20

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

 

protocol-port aggregation export information:

  Flow source interface                              : GigabitEthernet0/0/1

  Flow destination VPN instance                      : VPN1

  Flow destination IP address (UDP)                  : 10.10.0.10 (30000)

  Version  8 exported flow number                    : 16

  Version  8 exported UDP datagram number (failed)   : 2 (0)

  Version  9 exported flow number                    : 16

  Version  9 exported UDP datagram number (failed)   : 2 (0)

  Version 10 exported flow number                    : 0

  Version 10 exported UDP datagram number (failed)   : 0 (0)

Table 2 Command output

Field

Description

IP export information

NetStream data export information.

Flow source interface

Source interface from which the NetStream data is exported.

Flow destination VPN instance

VPN to which the destination address of the NetStream data export belongs.

Flow destination IP address (UDP)

Destination IP address and UDP port number of the NetStream data export.

Flow destination IPv6 address (UDP)

Destination IPv6 address and UDP port number of the NetStream data export.

Version  5 exported flow number

Number of flows that are exported in version 5 format.

Version  5 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 5 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

Version  9 exported flow number

Number of flows that are exported in version 9 format.

Version  9 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 9 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

MPLS export information

Information about MPLS flows exported in version 9 format.

L2 export information

Statistics of the Layer 2 data export.

protocol-port aggregation export information

Statistics of NetStream protocol-port aggregation in version 8 format.

Version  8 exported flow number

Number of flows that are exported in version 8 format.

Version  8 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 8 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

Version 10 exported flow number

Number of flows that are exported in version 10 format.

Version 10 exported UDP datagram number (failed)

Number of UDP packets that are sent in version 10 format. The field in the parentheses indicates the number of UDP packets that failed to be sent.

display ip netstream template

Use display ip netstream template to display NetStream template information.

Syntax

display ip netstream template [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays NetStream template information for the active MPU.

Usage guidelines

IP NetStream templates vary by aggregation mode. This command displays IP NetStream template information for all the configured aggregation modes.

Examples

# Display NetStream template information.

<Sysname> display ip netstream template

 Flow template refresh frequency            : 20

 Flow template refresh interval             : 30 min

 Active flow templates                      : 2

 Created flow templates                     : 2

 

Protocol-port outbound template:

 Template ID                : 3258

 Field count                : 14

 Field type                   Field length (bytes)

---------------------------------------------------------------------------

 Flows                        4

 Out packets                  8

 Out bytes                    8

 First forwarded              4

 Last forwarded               4

 Protocol                     1

 Direction                    1

 PAD                          1

 PAD                          1

 L4 source port               2

 L4 destination port          2

 Sampling algorithm           1

 PAD                          1

 PAD                          1

 PAD                          1

 Sampling interval            4

 Local TTE ID                 4

 Remote TTE ID                4

 

Protocol-port inbound template:

 Template ID                : 3257

 Field count                : 14

 Field type                   Field length (bytes)

---------------------------------------------------------------------------

 Flows                        4

 In packets                   8

 In bytes                     8

 First forwarded              4

 Last forwarded               4

 Protocol                     1

 Direction                    1

 PAD                          1

 PAD                          1

 L4 source port               2

 L4 destination port          2

 Sampling algorithm           1

 PAD                          1

 PAD                          1

 PAD                          1

 Sampling interval            4

 Local TTE ID                 4

 Remote TTE ID                4

# Display NetStream template information after the RFC 7011-compliant template format is specified.

<Sysname> display ip netstream template

Flow template refresh frequency            : 20

 Flow template refresh interval             : 30 min

 Active flow templates                      : 2

 Created flow templates                     : 2

L3 outbound template:

 Template ID                : 3282

 Packets                    : 0

 Last template export time  : Never

 Field count                : 26

 Field type                   Field length (bytes)

------------------------------------------------------------------------------

 Out packets                  8

 Out bytes                    8

 First forwarded              4

 Last forwarded               4

 Input interface index        4

 Output interface index       4

 Source IPv4 address          4

 Destination IPv4 address     4

 Next hop IPv4 addres         4

 Source AS                    4

 Destination AS               4

 L4 source port               2

 L4 destination port          2

 IP protocol version          1

 TCP flags                    1

 Protocol                     1

 Source ToS                   1

 Source address mask          1

 Destination address mask     1

 Direction                    1

 Forwarding status            1

 Sampling algorithm           1

 PAD                          1

 Sampling interval            4

 App ID                       4

 App name                     65535

L3 inbound template:

 Template ID                : 3281

 Packets                    : 0

 Last template export time  : Never

 Field count                : 26

 Field type                   Field length (bytes)

------------------------------------------------------------------------------

 In packets                   8

 In bytes                     8

 First forwarded              4

 Last forwarded               4

 Input interface index        4

 Output interface index       4

 Source IPv4 address          4

 Destination IPv4 address     4

 Next hop IPv4 addres         4

 Source AS                    4

 Destination AS               4

 L4 source port               2

 L4 destination port          2

 IP protocol version          1

 TCP flags                    1

 Protocol                     1

 Source ToS                   1

 Source address mask          1

 Destination address mask     1

 Direction                    1

 Forwarding status            1

 Sampling algorithm           1

 PAD                          1

 Sampling interval            4

 App ID                       4

 App name                     65535

Table 3 Command output

Field

Description

Flow template refresh frequency

Refresh frequency at which the templates are sent, in packets.

Flow template refresh interval

Refresh interval at which the templates are sent, in minutes.

Active flow templates

Number of active NetStream templates.

Created flow templates

Number of templates that have been created.

Protocol-port outbound template

Information of the protocol-port template in the outbound direction.

Protocol-port inbound template

Information of the protocol-port template in the inbound direction.

Packets

Number of packets sent by using the template.

Last template export time

Time when the template was last exported.

Field count

Total number of fields in a template.

Field type

Type of a field in the template.

Flows

Number of aggregate flows.

Out packets

Number of sent packets.

 

In packets

Number of received packets.

 

Out bytes

Size of sent packets, in bytes.

 

In bytes

Size of received packets, in bytes.

 

First forwarded

System time when the first packet was forwarded, accurate to milliseconds.

Last forwarded

System time when the last packet was forwarded, accurate to milliseconds.

L4 source port

Source UDP or TCP port.

L4 destination port

Destination UDP or TCP port.

PAD

Padding string.

Sampling interval

Sampling rate.

Local TTE ID

Local tunnel endpoint ID. This field is supported only by version 9.

Remote TTE ID

Remote tunnel endpoint ID. This field is supported only by version 9.

SRv6 policy color

Color for the SRv6 TE policy. This field is supported only by version 9.

SRv6 policy endpoint

IPv6 address of the destination node for the SRv6 TE policy. This field is supported only by version 9.

SRv6 policy name

Name of the SRv6 TE policy. This field is supported only by version 9.

 

enable

Use enable to enable a NetStream aggregation mode.

Use undo enable to disable a NetStream aggregation mode.

Syntax

enable

undo enable

Default

No NetStream aggregation mode is enabled.

Views

NetStream aggregation mode view

Predefined user roles

network-admin

Examples

# Enable NetStream destination-prefix aggregation mode.

<Sysname> system-view

[Sysname] ip netstream aggregation destination-prefix

[Sysname-ns-aggregation-dstpre] enable

Related commands

ip netstream aggregation

ip netstream

Use ip netstream to enable NetStream on an interface.

Use undo ip netstream to disable NetStream on an interface.

Syntax

ip netstream [ inbound | outbound ]

undo ip netstream [ inbound | outbound ]

Default

NetStream is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Enables NetStream for incoming traffic.

outbound: Enables NetStream for outgoing traffic.

Usage guidelines

If you configure this command without specifying a traffic direction, NetStream is enabled on the interface for both incoming and outgoing traffic.

Examples

# Enable NetStream for incoming traffic on GigabitEthernet 0/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 0/0/1

[Sysname-GigabitEthernet0/0/1] ip netstream inbound

ip netstream aggregation

Use ip netstream aggregation to specify a NetStream aggregation mode and enter its view.

Use undo ip netstream aggregation to remove the configuration for a NetStream aggregation mode.

Syntax

ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

undo ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix }

Default

No NetStream aggregation mode is specified.

Views

System view

Predefined user roles

network-admin

Parameters

as: Specifies the AS aggregation by source AS number, destination AS number, inbound interface index, and outbound interface index.

destination-prefix: Specifies the destination-prefix aggregation by destination AS number, destination address mask length, destination prefix, and outbound interface index.

prefix: Specifies the source and destination prefix aggregation by the following criteria:

·     Source AS number.

·     Destination AS number.

·     Source address mask length.

·     Destination address mask length.

·     Source prefix.

·     Destination prefix.

·     Inbound interface index.

·     Outbound interface index.

prefix-port: Specifies the prefix-port aggregation by the following criteria:

·     Source prefix.

·     Destination prefix.

·     Source address mask length.

·     Destination address mask length.

·     ToS.

·     Protocol number.

·     Source port.

·     Destination port.

·     Inbound interface index.

·     Outbound interface index.

protocol-port: Specifies the protocol-port aggregation by protocol number, source port, and destination port.

source-prefix: Specifies the source-prefix aggregation by source AS number, source address mask length, source prefix, and inbound interface index.

tos-as: Specifies the ToS-AS aggregation by ToS, source AS number, destination AS number, inbound interface index, and outbound interface index.

tos-bgp-nexthop: Specifies the ToS-BGP nexthop aggregation by ToS, BGP next hop address, and outbound interface index. ToS-BGP next hop aggregation is supported by a version 9 template.

tos-destination-prefix: Specifies the ToS-destination-prefix aggregation by ToS, destination AS number, destination address mask length, destination prefix, and outbound interface index.

tos-prefix: Specifies the ToS-prefix aggregation by the following criteria:

·     ToS.

·     Source AS number.

·     Source prefix.

·     Source address mask length.

·     Destination AS number.

·     Destination address mask length.

·     Destination prefix.

·     Inbound interface index.

·     Outbound interface index.

tos-protocol-port: Specifies the ToS-protocol-port aggregation by ToS, protocol number, source port, destination port, inbound interface index, and outbound interface index.

tos-source-prefix: Specifies the ToS-source-prefix aggregation by ToS, source AS number, source prefix, source address mask length, and inbound interface index.

Usage guidelines

In NetStream aggregation mode view, you can perform the following tasks:

·     Enable or disable the specified NetStream aggregation mode.

·     Configure source interface, destination IP address, and destination port for the NetStream data export.

A flow matching multiple aggregation modes is counted as multiple aggregate flows.

Examples

# Set the NetStream aggregation mode to AS, and enter NetStream AS aggregation mode view.

<Sysname> system-view

[Sysname] ip netstream aggregation as

[Sysname-ns-aggregation-as]

Related commands

enable

ip netstream export host

ip netstream export source

ip netstream aging

Use ip netstream aging command to enable periodical aging and TCP FIN- and RST-triggered aging.

Use undo ip netstream aging to disable periodical aging and TCP FIN- and RST-triggered aging.

Syntax

ip netstream aging

undo ip netstream aging

Default

Periodical aging and TCP FIN- and RST-triggered aging are enabled.

Views

System view

Predefined user roles

network-admin

Examples

# Disable periodical aging and TCP FIN- and RST-triggered aging.

<Sysname> system-view

[Sysname] undo ip netstream aging

ip netstream export host

Use ip netstream export host to specify a destination host for NetStream data export.

Use undo ip netstream export host to remove the specified destination host or all destination hosts that are configured in the current view.

Syntax

ip netstream export host { ipv4-address | ipv6-address } udp-port [ vpn-instance vpn-instance-name ]

undo ip netstream export host [ ipv4-address | ipv6-address ] [ vpn-instance vpn-instance-name ]

Default

No destination host is specified for NetStream data export.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies the destination IPv4 address.

ipv6-address: Specifies the dedtination IPv6 address.

udp-port: Specifies the destination UDP port number in the range of 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination host belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option.

Usage guidelines

You can specify the same destination IP address and UDP port in different NetStream aggregation mode views. If an aggregation mode is not enabled, the display ip netstream export command cannot display the destination host configuration for the mode.

If no destination host is specified in a NetStream aggregation mode view, the destination host in system view applies. If destination hosts are specified in a NetStream aggregation view and system view, the destination hosts in aggregation view take effect.

You can specify a maximum of four destination hosts in system view or a NetStream aggregation mode view. If you specify a destination host with the same IP address but different UDP ports in the same view, the most recent configuration takes effect. You can specify destination hosts with the same IP address and UDP port but different VPN instances.

NetStream traditional data is exported to all destination hosts in system view. NetStream aggregation data is exported to all destination hosts in the related NetStream aggregation mode view. If you expect only the aggregation data, specify destination hosts only in the NetStream aggregation mode view. Aggregation data export reduces bandwidth usage.

Examples

# In system view, specify 172.16.105.48 as the IP address of the destination host and UDP port 5000 as the export destination port number.

<Sysname> system-view

[Sysname] ip netstream export host 172.16.105.48 5000

Related commands

ip netstream aggregation

ip netstream export source

ip netstream export rate

Use ip netstream export rate to limit the NetStream data export rate.

Use undo ip netstream export rate to restore the default.

Syntax

ip netstream export rate rate

undo ip netstream export rate

Default

The export rate of NetStream data is not limited.

Views

System view

Predefined user roles

network-admin

Parameters

rate: Specifies the export rate in the range of 1 to 1000.

Usage guidelines

This command sets the maximum number of NetStream packets that can be exported per second. Packets that cannot be exported due to the export rate limit are buffered for later export. When the buffer is full, the system will temporarily invalidate the rate limit and export packets as fast as possible until the buffer has space for new packets.

Examples

# Allow a maximum of 10 packets to be exported per second.

<Sysname> system-view

[Sysname] ip netstream export rate 10

ip netstream export source

Use ip netstream export source to specify the source interface for data packets sent to NetStream servers.

Use undo ip netstream export source to restore the default.

Syntax

ip netstream export source interface interface-type interface-number

undo ip netstream export source

Default

The packets take the IP address of the output interface as the source IP address.

Views

System view

NetStream aggregation mode view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies a source interface by its type and number.

Usage guidelines

The IP address of the specified source interface is used as the source IP address for packets sent to NetStream servers.

You can configure different source interfaces in different NetStream aggregation mode views.

If no source interface is configured in a NetStream aggregation mode view, the source interface in system view applies.

Examples

# In system view, specify GigabitEthernet 0/0/1 as the source interface for NetStream traditional data packets.

<Sysname> system-view

[Sysname] ip netstream export source interface gigabitethernet 0/0/1

# In AS aggregation mode view, specify GigabitEthernet 0/0/2 as the source interface for NetStream aggregation data packets.

<Sysname> system-view

[Sysname] ip netstream aggregation as

[Sysname-ns-aggregation-as] ip netstream export source interface gigabitethernet 0/0/2

Related commands

ip netstream aggregation

ip netstream export template refresh-rate

Use ip netstream export template refresh-rate to set the refresh rate for the NetStream version 9 or version 10 template.

Use undo ip netstream export template refresh-rate to restore the default.

Syntax

ip netstream export template refresh-rate { packet packets | time minutes }

undo ip netstream export template refresh-rate { packet | time }

Default

The packet count-based refresh rate is 20 packets, and the time-based refresh interval is 30 minutes.

Views

System view

Predefined user roles

network-admin

Parameters

packets: Specifies the number of packets that are sent before the template is sent. The value range is 1 to 600.

time minutes: Specifies the interval at which the template is sent, in the range of 1 to 3600 minutes.

Usage guidelines

Version 9 and version 10 are template-based and support user-defined formats. A NetStream device must send the version 9 or version 10 template to NetStream servers regularly, because the servers do not permanently save the templates.

The refresh rate can be packet count-based or time-based. If both settings are configured, the template is sent when either of the conditions is met.

Examples

# Configure the device to send the Netstream version 9 or version 10 template to NetStream servers every 100 packets.

<Sysname> system-view

[Sysname] ip netstream export template refresh-rate packet 100

ip netstream export version

Use ip netstream export version 5 to export NetStream data in the version 5 format and choose whether to record AS information.

Use ip netstream export version 9 to export NetStream data in the version 9 format and choose whether to record AS information.

Use ip netstream export version 10 to export NetStream data in the version 10 format and choose whether to record AS information.

Use undo ip netstream export version to restore the default.

Syntax

ip netstream export version 5 { origin-as | peer-as }

ip netstream export version { 9 | 10 } { origin-as | peer-as } [ bgp-nexthop ]

undo ip netstream export version

Default

NetStream traditional data export uses the version 9 format. The peer AS numbers are exported. The BGP next hop is not recorded.

Views

System view

Predefined user roles

network-admin

Parameters

origin-as: Records the source AS of the source address and the destination AS of the destination address.

peer-as: Records the ASs before and after the AS where the NetStream device resides as the source AS and destination AS, respectively.

bgp-nexthop: Records BGP next hops.

Usage guidelines

A NetStream entry records the source IP address and destination IP address, and two AS numbers for each IP address. You can choose to configure which AS numbers are to be exported as the source AS and destination AS.

You can also choose whether to recoord BGP next hop data in the version 9 or version 10 format.

Only one version format can take effect on the device. If you execute the command multiple times, the most recent configuration takes effect.

If the version 5 format is configured, the NetStream aggregation data export uses the version 8 format.

If the version 9 format is configured, the NetStream aggregation data export uses the version 9 format.

If the version 10 format is configured, the NetStream aggregation data export uses the version 10 format.

Examples

# Configure the device to export NetStream data in the version 5 format and specify the NetStream data to include the source AS and destination AS.

<Sysname> system-view

[Sysname] ip netstream export version 5 origin-as

ip netstream filter

Use ip netstream filter to enable NetStream filtering on an interface.

Use undo ip netstream filter to disable NetStream filtering on an interface.

Syntax

ip netstream { inbound | outbound } filter acl acl-number

undo ip netstream { inbound | outbound } filter

Default

NetStream filtering is disabled. NetStream collects statistics about all IPv4 packets passing through an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Filters incoming traffic.

outbound: Filters outgoing traffic.

acl acl-number: Specifies an IPv4 ACL by its number. The value range is 2000 to 2999 for basic ACLs and 3000 to 3999 for advanced ACLs.

Usage guidelines

NetStream filtering uses an ACL to identify intended packets.

·     If you want to collect data for specific flows, use the ACL permit statements to identify the flows. NetStream collects data only for these flows.

·     If you do not want to collect data for specific flows, use the ACL deny statements to identify the flows. NetStream does not collect data for these flows.

If the used ACL does not exist, or no rule is specified for the used ACL, NetStream filters all inbound and outbound packets for the interface.

Examples

# Use ACL 2003 for outbound NetStream filtering on GigabitEthernet 0/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 0/0/1

[Sysname-GigabitEthernet0/0/1] ip netstream outbound

[Sysname-GigabitEthernet0/0/1] ip netstream outbound filter acl 2003

ip netstream ipsec raw-packet

Use ip netstream ipsec raw-packet to enable NetStream for outgoing packets before IPsec encapsulation.

Use undo ip netstream ipsec raw-packet to restore the default.

Syntax

ip netstream ipsec raw-packet

undo ip netstream ipsec raw-packet

Default

NetStream is enabled for outgoing IPsec encapsulated packets.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only after you enable NetStream in the outbound direction of the interface.

Examples

# Enable NetStream for outgoing packets before IPsec encapsulation on GigabitEthernet 0/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 0/0/1

[Sysname-GigabitEthernet0/0/1] ip netstream outbound

[Sysname-GigabitEthernet0/0/1] ip netstream ipsec raw-packet

ip netstream max-entry

Use ip netstream max-entry to set the upper limit for NetStream entries or specify the processing method when the upper limit is reached.

Use undo ip netstream max-entry to restore the default.

Syntax

ip netstream max-entry { max-entries | aging | disable-caching }

undo ip netstream max-entry

Default

If the number of NetStream entries in the cache reaches the upper limit, the system will age out some of the entries.

Views

System view

Predefined user roles

network-admin

Parameters

max-entries: Specifies the upper limit for NetStream entries that the cache can accommodate.The value range is 1000 to 100000.

aging: Ages out the oldest entries when the upper limit is reached.

disable-caching: Disables creation of a new entry when the upper limit is reached.

Usage guidelines

The max-entries argument takes effect on each card.

If you execute the ip netstream max-entry max-entries command multiple times, the most recent configuration takes effect.

If you execute the ip netstream max-entry { aging | disable-caching } command multiple times, the most recent configuration takes effect.

Examples

# Set the upper limit to 5000 for NetStream entries.

<Sysname> system-view

[Sysname] ip netstream max-entry 5000

# Disable creation of a new entry when the upper limit is reached.

<Sysname> system-view

[Sysname] ip netstream max-entry disable-caching

# Configure the device to age out the oldest entries when the upper limit is reached.

<Sysname> system-view

[Sysname] ip netstream max-entry aging

ip netstream mpls

Use ip netstream mpls to enable MPLS packet statistics collection.

Use undo ip netstream mpls to disable MPLS packet statistics collection.

Syntax

ip netstream mpls  [ label-positions label-position1 [ label-position2 [ label-position3 ] ] ] [ no-ip-fields ]

undo ip netstream mpls

Default

MPLS packet statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

label-positions: Specifies position of the labels to be counted.

label-position1: Specifies the label position in the label stack, in the range of 1 to 6, representing labels from the top label to the bottom label.

label-position2: Specifies the label position in the label stack. The value range is 1 to 6, representing labels from the top label to the bottom label. Do not specify the position that has been specified.

label-position3: Specifies the label position in the label stack. The value range is 1 to 6, representing labels from the top label to the bottom label. Do not specify the position that has been specified.

no-ip-fields: Specifies not to count IP fields.

Usage guidelines

This command enables statistics collection of MPLS packets for both IPv4 and IPv6 NetStream.

If you do not specify any keywords or options, the top label and IP fields are counted.

If multiple labels are to be counted, the label positions specified cannot be the same and are in ascending order.

Examples

# Enable NetStream for MPLS packets with top label counted but without IP fields.

<Sysname> system-view

[Sysname] ip netstream mpls no-ip-fields

Related commands

display ip netstream cache

ip netstream sampler

Use ip netstream sampler to enable NetStream sampling.

Use undo ip netstream sampler to disable NetStream sampling.

Syntax

ip netstream [ inbound | outbound ] sampler sampler-name

undo ip netstream [ inbound | outbound ] sampler

Default

NetStream sampling is disabled.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Enables NetStream sampling in the inbound direction.

outbound: Enables NetStream sampling in the outbound direction.

sampler sampler-name: Specifies a sampler by its name. The name is a case-insensitive string of 1 to 31 characters.

Usage guidelines

NetStream sampling allows you to collect basically accurate network statistics and decrease the NetStream traffic volume. The decreased traffic lessens the impact on the device forwarding performance. The higher the sampling rate, the less impact on device performance.

If you configure this command without specifying a traffic direction, NetStream sampling is enabled on the interface for both inbound and outbound traffic.

Examples

# Use sampler abc for inbound NetStream sampling on GigabitEthernet 0/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 0/0/1

[Sysname-GigabitEthernet0/0/1] ip netstream inbound

[Sysname-GigabitEthernet0/0/1] ip netstream inbound sampler abc

ip netstream outbound sampler srv6-policy

Use ip netstream outbound sampler srv6-policy to enable NetStream sampling for an SRv6 TE policy.

Use undo ip netstream outbound sampler srv6-policy to disable NetStream sampling for an SRv6 TE policy.

Syntax

ip netstream outbound sampler sampler-name srv6-policy end-point ipv6 ipv6-address color color-value

undo ip netstream outbound sampler sampler-name srv6-policy end-point ipv6 ipv6-address color color-value

Default

NetStream sampling is disabled for an SRv6 TE policy.

Views

System view

Predefined user roles

network-admin

Parameters

sampler-name: Specifies a sampler by its name. The name is a case-insensitive string of 1 to 31 characters. For more information about a sampler, see Network Management and Monitoring Configuration Guide.

end-point ipv6 ipv6-address: Specifies the IPv6 address of the destination node for an SRv6 TE policy.

color color-value: Specifies the color for an SRv6 TE policy, in the range of 0 to 4294967295.

Usage guidelines

Execute this command on the ingress node for an SRv6 TE policy. This command does not take effect on any other nodes.

During the statistics collection about the outgoing traffic forwarded on the ingress node for an SRv6 TE policy, the device performance will decrease if the number of packets to be collected is too large. In this case, execute this command on the ingress node for the SRv6 TE policy to enable NetStream to sample the outgoing traffic forwarded based on that SRv6 TE policy. For more information about SRv6 TE policies, see Segment Routing Configuration Guide.

Examples

# Enable NetStream sampling by using sampler abc for the SRv6 TE policy whose destination node is at 1000::1 and color is 10.

<Sysname> system-view

[Sysname] ip netstream outbound sampler abc srv6-policy endpoint ipv6 1000::1 color 10

 Related commands

ip netstream outbound srv6-policy

ip netstream outbound srv6-policy

Use ip netstream outbound srv6-policy to enable NetStream for an SRv6 TE policy.

Use undo ip netstream outbound srv6-policy to disable NetStream for an SRv6 TE policy.

Syntax

ip netstream outbound srv6-policy end-point ipv6 ipv6-address color color-value

undo ip netstream outbound srv6-policy end-point ipv6 ipv6-address color color-value

Default

NetStream is disabled for an SRv6 TE policy.

Views

System view

Predefined user roles

network-admin

Parameters

end-point ipv6 ipv6-address: Specifies the IPv6 address of the destination node for an SRv6 TE policy.

color color-value: Specifies the color for an SRv6 TE policy, in the range of 0 to 4294967295.

Usage guidelines

Execute this command on the ingress node for an SRv6 TE policy. This command does not take effect on any other nodes.

This command enables NetStream to collect statistics about the outgoing traffic forwarded based on an SRv6 TE policy. For more information about SRv6 TE policies, see Segment Routing Configuration Guide.

Examples

# Enable NetStream for the SRv6 TE policy whose destination node is at 1000::1 and color is 10.

<Sysname> system-view

[Sysname] ip netstream outbound srv6-policy endpoint ipv6 1000::1 color 10

 Related commands

ip netstream outbound sampler srv6-policy

ip netstream template rfc7011

Use ip netstream template rfc7011 to specify the RFC 7011-compliant template format.

Use undo ip netstream template rfc7011 to restore the default.

Syntax

ip netstream template rfc7011

undo ip netstream template rfc7011

Default

NetStream uses the H3C-defined template format.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command enables NetStream to use the template format defined by the RFC 7011 for data export. Make sure the NetStream template format on the device is consistent with that on the server.

This command applies to both IPv4 and IPv6 NetStream templates.

Examples

# Specify the RFC 7011-compliant template format.

<Sysname> system-view

[Sysname] ip netstream template rfc7011

ip netstream timeout active

Use ip netstream timeout active to set the aging timer for active flows.

Use undo ip netstream timeout active to restore the default.

Syntax

ip netstream timeout active minutes

undo ip netstream timeout active

Default

The aging timer is 30 minutes for active flows.

Views

System view

Predefined user roles

network-admin

Parameters

minutes: Sets the aging timer for active flows, in the range of 1 to 60 minutes.

Usage guidelines

A flow is considered active if packets for the NetStream entry arrive before the timer set by this command expires.

Examples

# Set the aging timer to 60 minutes for active flows.

<Sysname> system-view

[Sysname] ip netstream timeout active 60

Related commands

ip netstream timeout inactive

ip netstream timeout inactive

Use ip netstream timeout inactive to set the aging timer for inactive flows.

Use undo ip netstream timeout inactive to restore the default.

Syntax

ip netstream timeout inactive seconds

undo ip netstream timeout inactive

Default

The aging timer is 30 seconds for inactive flows.

Views

System view

Predefined user roles

network-admin

Parameters

seconds: Sets the aging timer for inactive flows, in the range of 10 to 600 seconds.

Usage guidelines

A flow is considered inactive if no packet for the NetStream entry arrives before the timer set by this command expires.

Examples

# Set the aging timer to 60 seconds for inactive flows.

<Sysname> system-view

[Sysname] ip netstream timeout inactive 60

Related commands

ip netstream timeout active

reset ip netstream statistics

Use reset ip netstream statistics to clear the NetStream cache and export the cached entries to NetStream servers.

Syntax

reset ip netstream statistics

Views

User view

Predefined user roles

network-admin

Usage guidelines

It takes the system several minutes to execute the command. During this period, the system does not collect NetStream data.

Examples

# Clear the NetStream cache and export the cached data to NetStream servers.

<Sysname> reset ip netstream statistics

This process may take a few minutes.

Netstream statistic function is disabled during this process.

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网