[j-nsp] packet sampling does not export any data, why?

[Joe Shen]

I tried with your sample configuration, but it seems
"sampling" is not available on my interface
configuration.

The JunOS version is 5.5. 

Joe


 --- Christopher Morrow <morrowc at ops-netman.net>
µÄÕýÎÄ£º
> 
> On Nov 18, 2004, at 3:40 AM, Joe Shen wrote:
> 
> > Hi,
> >
> > I'm trying to export "netflow" data from our M160.
> > I do the following configuration:
> >
> 
> don't have an m160 doing this, but a m20:
> 
>      ge-3/0/0 {
>          description "switch trunk";
>          vlan-tagging;
>          link-mode full-duplex;
>          gigether-options {
>              flow-control;
>          }
>          unit 1 {
>              vlan-id 1;
>              family inet {
>                  sampling {
>                      input;
>                      output;
>                  }
> 
> forwarding-options {
>      sampling {
>          input {
>              family inet {
>                  rate 1000;
>                  run-length 0;
>                  max-packets-per-second 50000;
>              }
>          }
>          output {
>              cflowd 2.3.4.5 {
>                  port 5000;
>                  source-address 1.2.3.4;
>                  version 5;
>              }
>          }
>      }
> 
> I believe 'sample' in a firewall filter means to
> 'tcpdump packets at  
> some rate' to local files on the disk on the
> router...
> 
> > ge-3/0/0 {
> >         description to_wul_10720;
> >         mtu 1522;
> >         unit 0 {
> >             family inet {
> >                 filter {
> >                     input netflow-sj;
> >                 }
> >                 address 10.10.67.129/30;
> >             }
> >             family mpls {
> >                 mtu 1508;
> >             }
> >         }
> >
> >
> > forwarding-options {
> >     sampling {
> >         input {
> >             family inet {
> >                 rate 1000;
> >                 run-length 1;
> >             }
> >         }
> >         output {
> >            cflowd 10.13.61.2 {
> >                 port 2056;
> >                 version 5;
> >             }
> >
> >         }
> >     }
> > }
> >
> >
> > firewall {
> >   filter netflow-sj {
> >         term all {
> >             then {
> >                 count sj;
> >                 sample;
> >                 accept;
> >             }
> >         }
> >     }
> > }
> >
> >
> > but, after setting up the configuration there is
> no
> > packet exported. Why? How could I get it work?
> >
> > Another question, if I want to get statistics of
> > source AS and destination AS, could I use
> "origin-as"
> > ?
> >
> >
> >
> > regards
> >
> > Joe
> >
> >
> >
> >
>
_________________________________________________________
> > Do You Yahoo!?
> > 150ÍòÇúMP3·è¿ñËÑ£¬´øÄú´³ÈëÒôÀÖµîÌÃ
> >
>
http://cn.rd.yahoo.com/mail_cn/tag/yisou/music/*http://music.yisou.com/
> > ÃÀÅ®Ã÷ÐÇÓ¦Óо¡ÓУ¬ËѱéÃÀͼ¡¢ÑÞͼºÍ¿áͼ
> >
>
http://cn.rd.yahoo.com/mail_cn/tag/yisou/image/*http://image.yisou.com
> > 1G¾ÍÊÇ1000Õ×£¬ÑÅ»¢µçÓÊ×ÔÖúÀ©ÈÝ£¡
> >
>
http://cn.rd.yahoo.com/mail_cn/tag/1g/*http://cn.mail.yahoo.com/event/
> 
> > mail_1g/
> > _______________________________________________
> > juniper-nsp mailing list
> juniper-nsp at puck.nether.net
> >
> http://puck.nether.net/mailman/listinfo/juniper-nsp
> 
>  

_________________________________________________________
Do You Yahoo!?
150ÍòÇúMP3·è¿ñËÑ£¬´øÄú´³ÈëÒôÀÖµîÌÃ
http://cn.rd.yahoo.com/mail_cn/tag/yisou/music/*http://music.yisou.com/
ÃÀÅ®Ã÷ÐÇÓ¦Óо¡ÓУ¬ËѱéÃÀͼ¡¢ÑÞͼºÍ¿áͼ
http://cn.rd.yahoo.com/mail_cn/tag/yisou/image/*http://image.yisou.com
1G¾ÍÊÇ1000Õ×£¬ÑÅ»¢µçÓÊ×ÔÖúÀ©ÈÝ£¡
http://cn.rd.yahoo.com/mail_cn/tag/1g/*http://cn.mail.yahoo.com/event/mail_1g/