[Contents] [Prev] [Next] [Index] [Report an Error]

Sampling All Traffic from a Single IP Address

The following configuration gathers statistical information about every packet entering the router on a specific Gigabit Ethernet port originating from a single source IP address of 10.45.92.31, and collects it in a file named samples-10-45-92-31.txt.

Create the filter:



[edit firewall family inet]
filter one-ip {


term get-ip {


from {
source-address 10.45.92.31;
}




then {
sample;
accept;
}


}


}

Apply the filter to the Gigabit Ethernet interface:



[edit interfaces]
ge-4/1/1 {


unit 0 {


family inet {


filter {
input one-ip;
}


address 10.45.92.254;
}


}


}

Finally, gather statistics on all the candidate samples; in this case, gather all statistics:



[edit forwarding-options]
sampling {


input {


family inet {
rate 1;
}


}




output {


file {
filename samples-215-45-92-31.txt;
files 100;
size 100k;
}


}


}

[Contents] [Prev] [Next] [Index] [Report an Error]