Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Creating and Viewing Service Analyzers

 

The packet analyzer is the endpoint to which the flow collector interface sends traffic for analysis. You can process and export multiple cflowd records with a flow collector interface. You can perform the following tasks with the Service Analyzer page:

  • Configure and provision filters for packet analysis.

  • Configure filters for CGNAT, ADC, and TLB services.

  • Start and stop the configured filters.

  • View the packet analyzer details as a statistical form or a graphical form.

Configuring the Traffic Analyzer Filter

To configure the traffic analyzer filter details on packet flows for the different services and to schedule its running:

  1. From the View selector, select Gateway View. The workspaces that are available in this view are displayed. The Gateway view displays the service delivery gateway (SDG) groups and the SDGs that are part of the high availability pair in an SDG group.
  2. From the Junos Space user interface, click the Build icon on the Edge Services Director banner.

    The functionalities that you can configure in this mode are displayed in the task pane.
  3. From the View pane, select the All Network item in Gateway view. Click the plus sign (+) beside the All Network item in the View pane to expand the tree and select the device node you want.
  4. From the task pane, do one of the following:
    • Select Service Analyzer > ADC Filter from the task pane. The Service Analyzer for ADC Filter page is displayed. The service instance or template that you previously configured for the ADC service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > TLB Filter from the task pane. The Service Analyzer for TLB Filter page is displayed. The service instance or template that you previously configured for the TLB service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > CGNAT Filter from the task pane. The Service Analyzer for CGNAT Filter page is displayed. The service instance or template that you previously configured for the CGNAT service type are displayed. All the instances created in the Service Templates workspace are shown.

    The list of SDGs or SDG pairs in a high availability group are displayed, along with the filter instances that were configured for the different services. The number of filter instances that are currently in progress and the number of filter instances that are scheduled or planned to be run at a later time are also displayed. For information on running or clearing filter instances, see Managing Service Analyzer Filter Instances.

  5. Select the SDGs or SDG pairs (you can select multiple rows to create and assign filters to several SDGs simultaneously) for which you want to create packet analyzer filters for services.
  6. Click the plus sign (+) above the table of listed SDGs to create a new filter. The Update Service Analyzer Filter Details page is displayed.
  7. In the Data Forward Flow section, do the following. A forward flow refers to packets that are sent in the forward or upward direction. A reverse flow refers to packets that are sent in the returning or backward direction.
    • From the Egress list, select the egress interface on which the data packets that are sent out in the forward flow must be monitored. Click Details beside the list to view interface details.

    • From the Ingress list, select the input interface on which the data packets that are received in the forward flow must be monitored. Click Details beside the list to view interface details.

  8. In the Data Reverse Flow section, do the following.
    • From the Egress list, select the egress interface on which the data packets that are sent out in the reverse flow must be monitored. Click Details beside the list to view interface details.

    • From the Ingress list, select the input interface on which the data packets that are received in the reverse flow must be monitored. Click Details beside the list to view interface details.

  9. In the Control Forward Flow section, do the following. A forward flow refers to packets that are sent in the forward or upward direction. A reverse flow refers to packets that are sent in the returning or backward direction.
    • From the Egress list, select the egress interface on which the control packets that are sent out in the forward flow must be monitored. Click Details beside the list to view interface details.

    • From the Ingress list, select the input interface on which the control packets that are received in the forward flow must be monitored. Click Details beside the list to view interface details.

  10. In the Data Reverse Flow section, do the following.
    • From the Egress list, select the egress interface on which the control packets that are sent out in the reverse flow must be monitored. Click Details beside the list to view interface details.

    • From the Ingress list, select the input interface on which the control packets that are received in the reverse flow must be monitored. Click Details beside the list to view interface details.

  11. Click Apply to save the filter settings. Otherwise, click Cancel to discard the changes. You are returned to the Service Analyzer page.
  12. If you created a new filter, the filter instance is displayed under the corresponding service type section, such as CGNAT or ADC. Such filters are provisioned filter instances. This display signifies that the filter is configured, but it needs to be scheduled to be run. Click the link that shows the number of instances under the column of the relevant service type. The Service Analyzer Instances page is shown.
  13. On this page, the names of the service instances for which filters are defined. The actions you can perform are in the form of the Clear and Run buttons, above the table of listed service instances, for each service instance with a filter.
  14. Select the check box next to a service analyzer filter and click the Delete button to remove a configured filter for an instance. You are prompted to confirm the deletion. If you click OK, a popup dialog box denotes the successful deletion.
  15. Select the check box next to a service analyzer filter instance, and click the Run button to schedule the filter to be run. The Run Filter dialog box appears. The Run button is grayed out if the particular service filter instance is already in progress.
  16. From the Poll Interval list, select the interval in minutes at which the data must be polled and collected. Values from 1 minute up to 59 minutes are shown in increments of 2 minutes in the list.
  17. In the Schedule Start Details section, click Run Now to start the filter immediately. Alternatively, click the Run At radio button and select the date and time at which the filter must be run.
  18. In the Schedule End Details section, do one of the following:
    • Click the Stop At radio button and select the date and time at which the filter must be stopped.

    • Click the Stop After radio button and specify a value for the number of polls after which the filter must be ended.

    • Click the Run Until Stopped radio button to continue running the test until you manually want to stop it.

  19. Click Run to save the filter settings. Otherwise, click Cancel to discard the changes. You are returned to the Prepared Service Analyzer Instances dialog box. Click Close to return to the Service Analyzer Page.

Managing Service Analyzer Filter Instances

To view, start, stop, or clear the configured analyzer filters:

  1. From the View selector, select Gateway View. The workspaces that are available in this view are displayed. The Gateway view displays the service delivery gateway (SDG) groups and the SDGs that are part of the high availability pair in an SDG group.
  2. From the Junos Space user interface, click the Build icon on the Edge Services Director banner.

    The functionalities that you can configure in this mode are displayed in the task pane.
  3. From the View pane, select the All Network item in Gateway view. Click the plus sign (+) beside the All Network item in the View pane to expand the tree and select the device node you want.
  4. From the task pane, do one of the following:
    • Select Service Analyzer > ADC Filter from the task pane. The Service Analyzer for ADC Filter page is displayed. The service instance or template that you previously configured for the ADC service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > TLB Filter from the task pane. The Service Analyzer for TLB Filter page is displayed. The service instance or template that you previously configured for the TLB service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > CGNAT Filter from the task pane. The Service Analyzer for CGNAT Filter page is displayed. The service instance or template that you previously configured for the CGNAT service type are displayed. All the instances created in the Service Templates workspace are shown.

    The list of SDGs or SDG pairs in a high availability group are displayed, along with the filter instances that were configured for the different services. The number of filter instances that are currently in progress and the number o filter instances that are scheduled or planned to be run at a later time are also displayed. For information on viewing filter instances, see Viewing the Traffic Analyzer Statistics and Graph.

  5. For the SDG corresponding to a certain service, all of the previously configured service analyzer filters are displayed in the Service Analyzer Instances page with the state of the filter instance under the Status column of the relevant service type. View the Status column for the current state of the filter.
    Figure 1: Service Analyzer Instances Page
    Service Analyzer Instances Page

    You can click the links under one of the following columns:

    • View—Click to display the traffic analyzer details on packet flows for the different services configured. For information on viewing filter instances, see Viewing the Service Analyzer Statistics and Graph.

    • Delete—Click to remove the configured filter for an instance. You are prompted to confirm the deletion. If you click OK, a popup dialog box denotes the successful deletion.

    • Run—Click to schedule a filter to be run. For information on scheduling a filter instance to be run, see Configuring the Traffic Analyzer Filter.

    • Report—Click to view the collection statistics and information about packets that are fetched. For information on viewing the collected details by a service analyzer, see Viewing the Service Analyzer Collection Data

    • Stop—Click to end a running filter. You are prompted to confirm whether you want to stop the filter instance. If you click OK, a popup dialog box denotes the successful termination of the filter instance.

    • Last Run Errors—Click to display any errors that occurred during the running of the filter instance. The Last Run Status dialog box is displayed. It contains the Provisioning Errors and Decommissioning Errors tabs that describe errors that might have occurred during the initialization and start of the analyzer filters or with the decommissioning and termination. The following fields are displayed in this dialog box for both the tabs:

      • Host Name—Host name of the SDG device.

      • Severity—System logging severity level.

      • Path—Hierarchy level of the configuration statement corresponding to the setting in the CLI interface Info Informational message about the error that is generated.

      • Message—System event logging message generated that describes the error.

    • Graph—Click to display the packet analyzer details for monitoring as a pictorial form. The Packet Flow Graph dialog box appears.

  6. In the dialog box, the Configured Instances column displays the names of the service instances for which filters are defined. The Actions column contains the Clear and Run subcolumns for each service instance with a filter.
  7. Click Delete to remove a configured filter for an instance. You are prompted to confirm the deletion. If you click OK, a popup dialog box denotes the successful deletion.
  8. Click Run beside the instance you want to schedule the filter to be run. The Run Filter dialog box appears to specify the schedule settings.

Viewing Service Analyzer Instance Details

To view the service analyzer instance details:

  1. From the View selector, select Gateway View. The workspaces that are available in this view are displayed. The Gateway view displays the service delivery gateway (SDG) groups and the SDGs that are part of the high availability pair in an SDG group.
  2. From the Junos Space user interface, click the Build icon on the Edge Services Director banner.

    The functionalities that you can configure in this mode are displayed in the task pane.
  3. From the View pane, select the All Network item in Gateway view. Click the plus sign (+) beside the All Network item in the View pane to expand the tree and select the device node you want.
  4. From the task pane, do one of the following:
    • Select Service Analyzer > ADC Filter from the task pane. The Service Analyzer for ADC Filter page is displayed. The service instance or template that you previously configured for the ADC service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > TLB Filter from the task pane. The Service Analyzer for TLB Filter page is displayed. The service instance or template that you previously configured for the TLB service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > CGNAT Filter from the task pane. The Service Analyzer for CGNAT Filter page is displayed. The service instance or template that you previously configured for the CGNAT service type are displayed. All the instances created in the Service Templates workspace are shown.

    The list of SDGs or SDG pairs in a high availability group are displayed, along with the filter instances that were configured for the different services. The number of filter instances that are currently in progress and the number o filter instances that are scheduled or planned to be run at a later time are also displayed. For information on running or clearing filter instances, see Managing Service Analyzer Filter Instances.

  5. Select the SDGs or SDG pairs (you can select multiple rows to create and assign filters to several SDGs simultaneously) for which you want to create packet analyzer filters for services.
  6. From the Service Analyzer page, for the SDG corresponding to a certain service, click the link under the column of the relevant service type. The Prepared Service Analyzer Instances dialog box is shown. Click View under the View column to view the traffic analyzer for the particular service.

    The View Service Instance Analyzer Details page is displayed.

    The following fields are displayed in this page:

    Field

    Description

    Name

    Name of the SDG or pair of SDGs in a high availability group.

    Type

    Service type for which packets collected are shown. Values are CGNAT, ADC, or TLB.

    Data Packets/Control Packets

    Click the Data Packets tab to view data packet details for the service analyzer filter. Alternatively, click the Control Packets tab to view control packet details for the service analyzer filter Indicates whether data or control packet details are shown.

    Forward Flow

    Displays statistics for packets in forward flow direction.

    Ingress

    Number of packets that arrive in the ingress direction in forward flow.

    Egress

    Number of packets that are sent out in the egress direction in forward flow.

    Reverse Flow

    Displays statistics for packets in reverse flow direction. If a service set is a sampling service set and the reverse-flow service order is not configured, all sampled traffic is considered to be forward traffic.

    Ingress

    Number of packets that arrive in the ingress direction in reverse flow.

    Egress

    Number of packets that are sent out in the egress direction in reverse flow.

  7. Click Close after viewing the analyzer filter details. You are returned to the Prepared Service Analyzer Instances dialog box. Click Close to return to the Service Analyzer Page

Viewing the Service Analyzer Statistics in Grid Format and Graph

To view the traffic analyzer details on packet flows for the different services that match the filter criteria:

  1. From the View selector, select Gateway View. The workspaces that are available in this view are displayed. The Gateway view displays the service delivery gateway (SDG) groups and the SDGs that are part of the high availability pair in an SDG group.
  2. From the Junos Space user interface, click the Build icon on the Edge Services Director banner.

    The functionalities that you can configure in this mode are displayed in the task pane.
  3. From the View pane, select the All Network item in Gateway view. Click the plus sign (+) beside the All Network item in the View pane to expand the tree and select the device node you want.
  4. From the task pane, do one of the following:
    • Select Service Analyzer > ADC Filter from the task pane. The Service Analyzer for ADC Filter page is displayed. The service instance or template that you previously configured for the ADC service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > TLB Filter from the task pane. The Service Analyzer for TLB Filter page is displayed. The service instance or template that you previously configured for the TLB service type are displayed. All the instances created in the Service Templates workspace are shown.

    • Select Service Analyzer > CGNAT Filter from the task pane. The Service Analyzer for CGNAT Filter page is displayed. The service instance or template that you previously configured for the CGNAT service type are displayed. All the instances created in the Service Templates workspace are shown.

    The list of SDGs or SDG pairs in a high availability group are displayed, along with the filter instances that were configured for the different services. The number of filter instances that are currently in progress and the number o filter instances that are scheduled or planned to be run at a later time are also displayed. For information on running or clearing filter instances, see Managing Service Analyzer Filter Instances.

  5. Select the SDGs or SDG pairs (you can select multiple rows to create and assign filters to several SDGs simultaneously) for which you want to create packet analyzer filters for services.
  6. From the Service Analyzer page, for the SDG corresponding to a certain service, click the link under the column of the relevant service type. The Prepared Service Analyzer Instances dialog box is shown. Click Report under the View Report column to view the traffic analyzer for the particular service.

    The Service Analyzer Collection Data — Grid View page is displayed.

    At the top of the tabular display, select the criteria for which you want to sort and segregate the packet analyzer information to be viewed. From the Criteria section, do the following:

    1. Select Control or Data from the first drop-down list to view control or data packets.

    2. Select Forward or Reverse from the second drop-down list to view statistics for packets in forward or reverse flows.

    3. Select IPv4 or IPv6 from the second drop-down list to view IPv4 or IPv6 packets for the filter instance.

    4. Click the search icon to apply the filter conditions and display details matching the specified criteria.

    The following fields are displayed in this page:

    Field

    Description

    Name

    Name of the SDG or pair of SDGs in a high availability group.

    Type

    Service type for which packets collected are shown. Values are CGNAT, ADC, or TLB.

    Collection Time

    Date and time at which the packet details are collected.

    Ingress

    Number of packets that arrive in the ingress direction in forward and reverse flow.

    PreService

    Number of packets in the forward flow and reverse flow before the processing of services. You can define the pre-service filter to be applied to traffic before it is accepted for service processing.

    Post Service

    Number of packets in the forward flow and reverse flow after processing of services. You can define the post-service filter to be applied to traffic after service processing. The filter is applied only if a service set is configured and selected. You can configure a postservice filter on the input side of the interface only. This setting is not supported when the service interface is on an MS-MIC or MS-MPC.

    Egress

    Number of packets that are sent out in the egress direction in forward flow and reverse flow.

    Click Close after viewing the collection data in the tabular grid. You are returned to the Prepared Service Analyzer Instances dialog box. Click Close to return to the Service Analyzer Page.

  7. Alternatively, you can view the service analyzer details in a graphical representation. Click Graph under the View Report column to display the packet analyzer details for monitoring as a pictorial form. The Packet Flow Graph dialog box appears.

    Line graphs are displayed for data forward flow, data reverse flow, control forward flow, and control reverse flow. The number of packets is displayed on the y-axis and time is displayed along the x-axis. The legends reference the egress, pre-service, post-service, and ingress packets. Mouse over the points in the graph to highlight and view the number of packets at a particular time instance.

    At the top of the graph, select the criteria for which you want to sort and segregate the packet analyzer information to be viewed. From the Criteria section, do the following:

    1. Select Control or Data from the first drop-down list to view control or data packets.

    2. Select IPv4 or IPv6 from the second drop-down list to view IPv4 or IPv6 packets for the filter instance.

    3. Select the period for which the service analyzer details must be shown from the third drop-down list. For example, you can select Last 10 Mins to display the service analyzer packets collected over the last 10 minutes or the Last 1 Hr option to display the service analyzer packets collected over the last one hour.

    4. Click the search icon to apply the filter conditions and display details matching the specified criteria.

  8. Click Close after viewing the graph. You are returned to the Prepared Service Analyzer Instances dialog box. Click Close to return to the Service Analyzer Page.

Related Documentation