这一部分来演示如何配置Juniper设备的cflowd/J-Flow输出。执行如下命令,可启用采样并将流记录输出到指定目的地址:
forwarding-options { sampling { input { family inet { rate 100; run-length 9; max-packets-per-second 7000; } } output { cflowd <destination address>{ port <port number>; source-address <source address>; version <version number>; no-local-dump; autonomous-system-type origin; } } } } |
要对需要进行流分析的特定接口启用包采样,可按照以下步骤:
interfaces {
ge-1/3/0 { vlan-tagging; unit 101 { vlan-id 101; family inet { sampling { input; output; } address 206.80.253.26/25 } } } } |