show status netflow
NetFlowの動作状況を参照する
show status netflow summary
NetFlowのサマリを参照する
コマンドの書式
show status netflow summary出力例：機能が無効化されている場合
NetFlow is not running.出力例：機能が有効化されている場合
NetFlow Global:
Flow Cache:
259 (limit:100000)
Timeout:
Timer:
Active: 00h01m00s
Inactive: 00h01m00s
Finrst: 00h00m30s
Statistics:
Active: 11149
Inactive: 5959
Finrst: 2553
Drop: 0
Template:
ipv4-five-tuple (id:256)
ipv6-five-tuple (id:257)
...
pppac4-ipv4-five-tuple-iij (id:272)
pppac6-ipv4-five-tuple-iij (id:273)
NetFlow Device:
Collector:
Observation Domain (DOM1):
Domain:
id:1
Observation Points
ge0:
sampling: 1/1 (systematic count)
statistics: ipkt:54526, ibyte:14532274, opkt:0, obyte:0
templates:
ipv4-five-tuple-iij
ipv6-five-tuple-iij
ipv4-seven-tuple-iij
ipv6-seven-tuple-iij
ge1:
sampling: 1/1 (systematic count)
statistics: ipkt:30065, ibyte:15220836, opkt:0, obyte:0
templates:
ipv4-five-tuple-iij
ipv6-five-tuple-iij
ipv4-seven-tuple-iij
ipv6-seven-tuple-iij説明
| 項目 | 項目の意味 | ||
|---|---|---|---|
| NetFlow Global | Flow Cache | フローキャッシュ数 (limit: 最大キャッシュ数) | |
| Timeout | Timer |
|
|
| Statistic |
|
||
| Templates | 登録されいているテンプレートと、そのID | ||
| NetFlow Device | Collector |
IPFIX メッセージの送信先アドレス
|
|
| source | IPFIX メッセージの送信元 アドレス | ||
| statistics | コレクタの統計情報 | ||
| Observation Domain | Domain |
|
|
| Observation Points <interfacce>: |
|
||
show status netflow template
NetFlowのテンプレート一覧を参照する
コマンドの書式
show status netflow template出力例：機能が無効化されている場合
NetFlow is not running.出力例：機能が有効化されている場合
ipv4-five-tuple:
key-list:
ingressInterface (iana:10)
flowDirection (iana:61)
sourceIPv4Address (iana:8)
destinationIPv4Address (iana:12)
protocolIdentifier (iana:4)
sourceTransportPort (iana:7)
destinationTransportPort (iana:11)
collection-list:
octetDeltaCount (iana:1)
packetDeltaCount (iana:2)
flowEndSysUpTime (iana:21)
flowStartSysUpTime (iana:22)
interfaceName (iana:82)
...説明
| 項目 | 項目の意味 |
|---|---|
<Template Name> |
テンプレート名 |
key-list |
KeyとなるIE |
collection-list |
Non-KeyのIE |
show status netflow cache
観測したフローのキャッシュを参照する
コマンドの書式
show status netflow cache出力例：機能が無効化されている場合
NetFlow is not running.出力例：機能が有効化されている場合
<ipv4-five-tuple-iij>
SrcIF SrcPhyIF Protocol SrcIPv4Addr DstIPv4Addr SrcPort DstPort Duration DeltaPkts DeltaBytes CPU
ge1 - icmp 192.168.253.1 192.168.253.11 - - 01h09m04s 1 62 3
ge0 - tcp 10.167.1.140 10.206.131.192 2049 927 01h09m07s 9 1218 0
ge1 - tcp 192.168.253.1 10.131.55.86 52635 8080 00h36m04s 2 138 3
...
ge0 - udp 10.206.131.199 255.255.255.255 1046 1046 01h09m12s 11 847 3
ge0 - udp 10.131.16.20 10.206.131.192 53 21040 00h00m00s 1 113 0
ge1 - - - - - - 01h08m53s 0 0 0
ge0 - - - - - - 01h09m13s 71 4272 0
<ipv6-five-tuple-iij>
SrcIF SrcPhyIF Protocol SrcIPv6Addr DstIPv6Addr SrcPort DstPort Duration DeltaPkts DeltaBytes CPU
ge1 - - - - - - 01h03m16s 109 26909 2
ge0 - - - - - - 01h03m17s 210 35926 0
ge0 - icmpv6 fe80::a4bc:ca8d:45b0:4933 ff02::1:ff00:1 - - 00h00m40s 0 0 2
ge1 - icmpv6 fc00::200 ff02::1:ff00:1 - - 01h08m53s 0 0 0
ge0 - icmpv6 fe80::de:4dd9:f3e9:6e51 ff02::1:ff00:1 - - 00h00m59s 0 0 0
ge0 - icmpv6 fe80::1 ff02::1 - - 00h00m00s 1 86 3
<ipv4-seven-tuple-iij>
SrcIF SrcPhyIF EthType SrcMAC DstMAC Protocol SrcIPv4Addr DstIPv4Addr SrcPort DstPort Duration DeltaPkts DeltaBytes CPU
ge1 - ipv4 52:54:00:28:74:21 00:e0:4d:50:03:51 icmp 192.168.253.1 192.168.253.11 - - 01h09m04s 1 62 3
ge0 - ipv4 c4:71:fe:b7:7c:bf 00:e0:4d:50:03:50 tcp 10.131.55.86 10.206.131.192 8080 52420 00h00m00s 1 66 2
ge1 - ipv4 52:54:00:28:74:21 00:e0:4d:50:03:51 tcp 192.168.253.1 10.131.55.86 52484 8080 00h00m00s 3 624 2
ge1 - ipv4 52:54:00:28:74:21 00:e0:4d:50:03:51 tcp 192.168.253.101 10.167.1.140 875 2049 01h07m02s 1 66 1
...
ge0 - arp 6c:62:6d:b3:7d:18 ff:ff:ff:ff:ff:ff - - - - - 00h00m00s 1 60 0
ge0 - arp 00:11:bb:ef:78:32 ff:ff:ff:ff:ff:ff - - - - - 00h00m00s 1 64 0
<ipv6-seven-tuple-iij>
SrcIF SrcPhyIF EthType SrcMAC DstMAC Protocol SrcIPv6Addr DstIPv6Addr SrcPort DstPort Duration DeltaPkts DeltaBytes CPU
ge0 - ipv6 00:1b:21:8c:72:4b 33:33:ff:00:00:01 icmpv6 fe80::a4bc:ca8d:45b0:4933 ff02::1:ff00:1 - - 00h00m40s 0 0 2
ge0 - ipv6 00:1e:8c:f1:ce:9c 33:33:ff:00:00:01 icmpv6 fe80::de:4dd9:f3e9:6e51 ff02::1:ff00:1 - - 00h00m59s 0 0 0
ge0 - ipv6 00:05:73:a0:0d:8b 33:33:00:00:00:01 icmpv6 fe80::1 ff02::1 - - 00h00m00s 1 86 3
ge1 - ipv6 52:54:00:45:2c:e9 33:33:ff:00:00:01 icmpv6 fc00::200 ff02::1:ff00:1 - - 01h08m53s 0 0 0
ge0 - arp 00:e0:4d:ff:06:bd ff:ff:ff:ff:ff:ff - - - - - 00h00m00s 1 60 0
...