[Contents]
[Prev]
[Next]
[Index]
[Report an Error]
Active Flow Monitoring
Flow monitoring versions 5, 8, and 9 support active
flow monitoring. For active flow monitoring, the monitoring station
participates in the network as an active routing platform. The major
actions the routing platform can perform during active flow monitoring
are as follows:
- Sampling—The routing platform selects and analyzes
only a portion of the traffic.
- Sampling with templates—The routing platform selects,
analyzes, and arranges a portion of the traffic into templates.
- Port mirroring—The routing platform copies entire
packets and sends the copies to another interface.
- Multiple port mirroring—The routing platform sends
multiple copies of monitored packets to multiple export interfaces
with the next-hop-group statement at the [edit forwarding-options] hierarchy level.
- Discard accounting—The routing platform accounts
for selected traffic before discarding it. Such traffic is not forwarded
out of the routing platform. Instead, the traffic is quarantined and
deleted.
- Flow-tap processing—The routing platform processes
requests for active flow monitoring dynamically by using the Dynamic
Tasking Control Protocol (DTCP).
[Contents]
[Prev]
[Next]
[Index]
[Report an Error]
