NE20 netstream

Latest reply: Jun 1, 2018 10:20:42 1844 14 0 0
Hi, 
I want to collect all packets on netstream.
I use this confs.
But  on nfsen I see a straight risk on grapgh. 
NE20 netstream-2667471-1

ip netstream timeout active 1
ip netstream timeout inactive 15
ip netstream tcp-flag enable
ip netstream export version 9 origin-as bgp-nexthop
ip netstream export index-switch 32
ip netstream export template timeout-rate 1
ip netstream sampler fix-packets 1 inbound
ip netstream sampler fix-packets 1 outbound
ip netstream export source 192.168.1.6
ip netstream export template option sampler
ip netstream export template option timeout-rate 1
#
ip netstream monitor UP1
 ip netstream export host 192.168.1.6 4447
#
ip netstream monitor UP2
 ip netstream export host 192.168.1.6 4446
#
interface Vlanif2001
 description UP-1 
 ip address X.X.X.X 255.255.255.252 
 ip netstream inbound 
 ip netstream outbound 
 ip netstream monitor UP1 inbound 
 ip netstream monitor UP1 outbound
#
interface Vlanif2002
 description UP-2
 ip address X.X.X.X 255.255.255.252
 ip netstream inbound
 ip netstream outbound
 ip netstream monitor UP2 inbound
 ip netstream monitor UP2 outbound
#
slot 3  ip netstream sampler to slot self
#
This post was last edited by Reginaldo at 2018-05-18 23:58.

This article contains more resources

You need to log in to download or view. No account?Register

x
  • x
  • convention:

w1
Created May 18, 2018 17:26:53 Helpful(0) Helpful(0)

  • x
  • convention:

PauloHenriqueF
Created May 19, 2018 12:02:22 Helpful(0) Helpful(0)

Hi, below my conf for flow based on aggregate ASN.
I hope this help you.

ip netstream export version 9 origin-as
ip netstream as-mode 32
ip netstream timeout active 1
ip netstream timeout inactive 5
ip netstream aggregation timeout active 1
ip netstream aggregation timeout inactive 5
ip netstream tcp-flag enable
ip netstream sampler fix-packets 1200 inbound
ip netstream sampler fix-packets 1200 outbound
ip netstream export source x.x.x.x
ip netstream export host y.y.y.y 9998
ip netstream aggregation as
enable
export version 9
template timeout-rate 1
ip netstream export source x.x.x.x
ip netstream export host y.y.y.y 9996
slot 3
interface GigabitEthernet0/3/34
ip netstream inbound
ip netstream outbound
interface GigabitEthernet0/3/42.2
ip netstream inbound
ip netstream outbound
slot
slot 3:ip netstream sampler to slot self

  • x
  • convention:

Mysterious.color
MVE Created May 20, 2018 10:12:56 Helpful(0) Helpful(0)

what is netsteam?
  • x
  • convention:

Core%20Engineer%2C%20Technical%20Department.%20High%20experience%20in%20Networking
StarOfWest
Created May 21, 2018 08:35:07 Helpful(0) Helpful(0)

it looks well, what is the problem? The sampling, it's quite aggressive, you sample to 1! Note that this might bring some risks, you may overload the CPU.

ip netstream sampler fix-packets 1 inbound
ip netstream sampler fix-packets 1 outbound
  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg
Reginaldo
Created May 21, 2018 13:03:50 Helpful(0) Helpful(0)

The problem is that before huawei I did not have that risk straight.

I always collect all packages. My traffic is low
  • x
  • convention:

StarOfWest
Created May 23, 2018 06:53:27 Helpful(0) Helpful(0)

If the traffic it's low, then it may be okay. I recommend to monitor the CPU for while and also keep in mind to check it in the future if the traffic passing through the system is increasing.
  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg
Reginaldo
Created May 23, 2018 17:16:23 Helpful(0) Helpful(0)

There's something wrong.
Is the number of packages exactly the same all day long?:(

CPU, I will monitore it. tks
  • x
  • convention:

StarOfWest
Created May 24, 2018 06:24:46 Helpful(0) Helpful(0)

What's wrong?
the number of packets may vary based on the traffic characteristics from that day.
  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg
Reginaldo
Created May 24, 2018 11:36:29 Helpful(0) Helpful(0)

In the image has the graphic before the huawei and after.
You can see the difference, after the huawei seems to be limited the number of packages.
The huawei in the graphic is yellow and blue.
The others are other equipment.


193205b2p65h6y642y2qtp.jpg

This article contains more resources

You need to log in to download or view. No account?Register

x
  • x
  • convention:

12
Back to list

Reply

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login