HP 6125G HP Networking guide to hardening Comware-based devices - Page 31

Approach II, enable NetStream through QoS policy.

Page 31 highlights

Approach II, enable NetStream through QoS policy. # ip netstream { inbound | outbound } # traffic behavior mirror-to interface net-stream # Approach III, enable NetStream through port mirroring. # ip { inbound | outbound } # interface Ethernet0/1/0 ip netstream mirror-to interface net-stream # Following is an example of NetStream output from the CLI. The If(Direc) attribute can be beneficial in traceback: # display ip netstream cache IP netstream cache information: Stream active timeout (in minutes) : 60 Stream inactive timeout (in seconds) : 10 Stream max entry number : 1000 IP active stream entry number : 1 MPLS active stream entry number : 2 L2 active stream entry number : 1 IPL2 active stream entry number : 1 IP stream entries been counted : 10 MPLS stream entries been counted : 20 L2 stream entries been counted : 10 IPL2 stream entries been counted : 20 Last statistics reset time : 01/01/2000, 00:01:02 IP packet size distribution (1103746 total packets): 1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 .249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608 .000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000 Protocol Total Streams Packets Stream Packets Active(sec) Idle(sec) /Sec /Sec /stream /stream /stream TCP-Telnet 2656855 372 TCP-FTP 5900082 86 4 86 49 27 9 9 11 33 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40

31
Approach II, enable NetStream through QoS policy.
#
ip netstream { inbound | outbound }
#
traffic behavior <behavior-name>
mirror-to interface net-stream <interface-number>
#
Approach III, enable NetStream through port mirroring.
#
ip { inbound | outbound }
#
interface Ethernet0/1/0
ip netstream mirror-to interface net-stream <interface-numbr>
#
Following is an example of NetStream output from the CLI. The
If(Direc)
attribute can be beneficial in traceback:
#
<Sysname> display ip netstream cache
IP netstream cache information:
Stream active timeout (in minutes)
: 60
Stream inactive timeout (in seconds)
: 10
Stream max entry number
: 1000
IP active stream entry number
: 1
MPLS active stream entry number
: 2
L2 active stream entry number
: 1
IPL2 active stream entry number
: 1
IP stream entries been counted
: 10
MPLS stream entries been counted
: 20
L2 stream entries been counted
: 10
IPL2 stream entries been counted
: 20
Last statistics reset time
: 01/01/2000, 00:01:02
IP packet size distribution (1103746 total packets):
1-32
64
96 128 160 192 224 256 288 320 352 384 416 448 480
.249 .694 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608
.000 .000 .027 .000 .027 .000 .000 .000 .000 .000 .000 .000
Protocol
Total
Packets
Stream Packets Active(sec) Idle(sec)
Streams
/Sec
/Sec
/stream
/stream
/stream
TCP-Telnet
2656855
372
4
86
49
27
TCP-FTP
5900082
86
9
9
11
33