Contents

NetAnalysis commands· 1

NetAnalysis for UDP commands· 1

display netanalysis udp cache· 1

display netanalysis udp statistics· 2

netanalysis udp identification block· 3

netanalysis udp statistics· 4

netanalysis udp timeout inactive· 4

reset netanalysis udp statistics· 5

 

NetAnalysis commands

NetAnalysis for UDP commands

display netanalysis udp cache

Use display netanalysis udp cache to display configuration and status of the UDP cache.

Syntax

display netanalysis udp cache [ destination destination-ip | interface interface-type interface-number | source source-ip ]*

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

destination destination-ip: Specifies the IP address at the server end of the UDP flow.

interface interface-type interface-number: Specifies the ingress interface number of the UDP flow.

source source-ip: Specifies the IP address at the client end of the UDP flow.

Usage guidelines

When the device receives UDP traffic, it does not immediately send NetAnalysis statistical information to the analyzer. Instead, it caches the statistical information in the UDP flow cache. The flow statistical information in the cache will be cleared after the inactive aging time of the UDP flow is reached.

Examples

# Display configuration and status of the UDP cache.

<sysname> display netanalysis udp cache source 1.1.1.2 destination 2.2.2.1

NetAnalysis cache information:

-----------------------------------------------------------------------------

Flow created at          Direction

Src IP                   Dst IP                   Src Port      Dst Port

Interface                Block Id      Block Timestamp

Receive Packets          Receive Bytes

-----------------------------------------------------------------------------

01/22/2019 09:08:15      inbound

1.1.1.2                  2.2.2.1                  1000          2000

XGE3/1/1                 10            100000000

5000                     6000000

Table 1 Command output

Field	Description
Direction	UDP flow direction.
Src IP	Source IP address of the UDP flow.
Dst IP	Destination IP address of the UDP flow.
Src Port	Source port of the UDP flow.
Dst Port	Destination port of the UDP flow.
Interface	Ingress interface of the UDP flow.
Receive Packets	Number of UDP packets within this block collected from the ingress interface of the UDP flow.
Receive Bytes	Bytes of UDP packets within this block collected from the ingress interface of the UDP flow.

 

display netanalysis udp statistics

Use display netanalysis udp statistics to display UDP traffic statistics.

Syntax

display netanalysis udp statistics

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display UDP traffic statistics.

<Sysname> display netanalysis udp statistics

Last statistics resetting time: Never

Netanalysis udp: Enable

--------------------------------------------------------------------------------

Received packets: 2833088

--------------------------------------------------------------------------------

Type

         Active        Aged           Created        Reported

        (Flows)       (Flows)         (Flows)        (Flows)

--------------------------------------------------------------------------------

UDP

        4              0              2              20

--------------------------------------------------------------------------------

Table 2 Command output

Field	Description
Last statistics resetting time	Most recent time at which the UDP traffic statistics were cleared.
Netanalysis udp	Whether UDP traffic statistics collection is enabled: ·     Disable—UDP traffic statistics collection is disabled. ·     Enable—UDP traffic statistics collection is enabled.
Type	Flow type. Only UDP is supported.
Active (Flows)	Number of active flows.
Aged (Flows)	Number of aged flows.
Created (Flows)	Number of created flows.
Reported (Flows)	Number of flows sent to the analyzer.

 

Related commands

reset netanalysis udp statistics

netanalysis udp identification block

Use netanalysis udp identification block to specify the number of blocks for segment analysis of UDP traffic.

Use undo netanalysis udp identification block to restore the default.

Syntax

netanalysis udp identification block block-number

undo netanalysis udp identification block

Default

The number of blocks for segment analysis of UDP traffic is 256.

Views

System view

Predefined user roles

network-admin

Parameters

block-number: Specifies the number of blocks. Options include 4, 8, 16, 32, 64, 128, and 256.

Usage guidelines

NetAnalysis for UDP traffic performs analysis on UDP flows based on the Block granularity. Each UDP flow contains multiple UDP packets. With each packet sent, the Identification field increases by 1. The field value determines the UDP packet sequence number.

In a UDP flow, UDP packets have sequence numbers ranging from 0 to 65535. By segmenting the sequence numbers of UDP packets, a UDP flow can be divided into multiple blocks. For example, setting the number of blocks to 128 means dividing a UDP flow into 128 blocks, with UDP packets numbered 0 to 511 belonging to the first block.

The NAP creates a flow table for the received UDP block and analyzes all UDP packets contained in the block.

Examples

# Set the number of blocks for segment analysis of UDP traffic to 64.

<Sysname> system-view

[Sysname] netanalysis udp identification block 64

netanalysis udp statistics

Use netanalysis udp statistics to enable UDP traffic statistics collection.

Use undo netanalysis udp statistics to disable UDP traffic statistics collection.

Syntax

netanalysis udp statistics acl name acl-name inbound

undo netanalysis udp statistics inbound

Default

UDP traffic statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

acl name acl-name: Specifies the name of the advanced ACL. The acl-name argument represents the name of the advanced ACL, a case-insensitive string of 1 to 63 characters that must start with a letter. To avoid confusion, the ACL name cannot be all.

inbound: Performs statistics collection on incoming UDP traffic.

Usage guidelines

Perform this task to enable NetAnalysis to analyze UDP traffic and send the analysis results to the NAP. You can use an ACL to match the UDP traffic of interest. The deny or permit action in the ACL does not take effect.

When you specify an ACL, follow these restrictions and guidelines:

·     If the specified ACL does not exist or does not contain any rules, the system does not perform NetAnalysis statistics collection on UDP traffic received on the specified ingress interface.

·     If you specify the vpn-instance keyword for an ACL rule, the rule takes effect only on VPN packets. If you do not specify the vpn-instance keyword for an ACL rule, the rule takes effect only on both VPN packets and public network packets.

For more information about ACLs, see ACL and QoS Configuration Guide.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Enable UDP traffic analysis on packets matching the specified ACL in the inbound direction of the device.

<Sysname> system-view

[Sysname] netanalysis udp statistics acl name abc inbound

netanalysis udp timeout inactive

Use netanalysis udp timeout inactive to set the aging timer for inactive UDP flow.

Use undo netanalysis udp timeout inactive to restore the default.

Syntax

netanalysis udp timeout inactive seconds

undo netanalysis udp timeout inactive

Default

The aging timer for inactive UDP flow is 30 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

seconds: Specifies the aging time in the range of 5 to 500 seconds.

Usage guidelines

With NetAnalysis statistics collection enabled for UDP traffic, the device must also send the UDP flow table containing the statistical results to the specified NDA to complete further processing and visualization of the flow information.

When an inactive UDP flow ages out, the device outputs the related traffic statistics to the NDA, deletes these traffic statistics from the UDP cache, and deletes the related flow entries.

Examples

# Set the aging timer for inactive UDP flow to 10 seconds.

<Sysname> system-view

[Sysname] netanalysis udp timeout inactive 10

reset netanalysis udp statistics

Use reset netanalysis udp statistics to clear UDP traffic statistics.

Syntax

reset netanalysis udp statistics

Views

User view

Predefined user roles

network-admin

Usage guidelines

When diagnosing and locating faults in the UDP flow analysis function, it is necessary to specifically count the UDP flow information over a certain period of time. In this case, you can use this command to first clear the history statistics.

Executing this command clears all historical UDP flow statistical information in the NetAnalysis function, and the cleared information cannot be recovered. Use this feature with caution.

Examples

# Clear UDP traffic statistics.

<Sysname> reset netanalysis udp statistics

Related commands

display netanalysis udp statistics