ADTRAN FNID Información técnica descargar pdf (Pagina 49)

Integrated Traffic Monitoring Troubleshooting

In this debug message, various information is given about each flow as it expires. The message reveals the

source IP address and port, the destination IP address and port, the direction of the traffic flow, the

interface it crossed, the ToS, and the protocol it uses.

Figure 5. Debug IP Flow Cache Expiration Output Detail

The following is sample output from the debug ip flow cache expiration command:

#debug ip flow cache expiration

#show run

interface shdsl 2/1

16:38:37: FLOW.CACHE: Expired 10.23.197.244:23 > 172.22.77.208: 1188 out eth 0/1 <T=0/P=6>

16:38:37: FLOW.CACHE: ^Idle Time = 60, Active Time = 60

interface adsl 1/1

16:39:20: FLOW.CACHE: Expired 10.23.197.244.23 > 172.22.77.208:1189 out eth 0/1 <T=0/P=6>

16:39:20: FLOW.CACHE: ^Idle Time = 60, Active Time = 90

In the previous example, the second lines of both the SHDSL interface and the ADSL interface output can

tell you whether the traffic flow has expired because of the Idle Timeout or the Active Timeout. Review the

idle and active times in the following line:

16:38:37: FLOW CACHE:^Idle Time=60, Active Time=60

Both the idle time and the active time are the same value. This phenomena tells you that the traffic flow

was used once, inserted into the flow cache, and then never used again.

In contrast, review the idle and active times in this line:

16:39:20: FLOW CACHE:^Idle Time=60, Active Time=90

In this example, the time values differ by 30 seconds. The idle time signifies that the traffic flow has not

been used in 60 seconds, while the active time signifies that the traffic flow has been in the flow meter for

90 seconds. This output tells you that the traffic flow was used multiple times, with the last access

occurring 30 seconds after it was first inserted into the flow meter.

To monitor the ingress of traffic on your AOS product, use the debug ip flow cache entry command. This

command sends you notification every time a new traffic flow is added to the flow cache. This command

can be useful for validating that the flow cache is working and observing traffic. The following is sample

output from the debug ip flow cache entry command:

#debug ip flow cache entry

#show run

16:52:20: FLOW.CACHE: Added 172.22.77.208: 1189 > 10.23.197.244: 23 in eth 0/1 <T=0/P=6>

16:38:37: FLOW.CACHE: Expired 10.23.197.244:23 > 172.22.77.208: 1188 out eth 0/1 <T=0/P=6>

Source IP address: Port

Destination IP

address:Port

Direction

Interface

ToS

Protocol

(6=TCP)

1 2 ... 44 45 46 47 48 49 50

Sin comentarios

ADTRAN FNID Información técnica Pagina 49