No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R010C00SPC200, 300, and 500 Self-Service Integration Guide 10

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring the Generation of NTA Northbound Files

Configuring the Generation of NTA Northbound Files

A third-party system user needs to configure the generation of original flow files of the network traffic analyzer (NTA) component before the system startup and set the storage duration and clearing period of the files to 1 hour and 3 minutes, respectively.

Procedure

Configure the DUMP_ENABLE item in the nta.properties file in <Installation directory> /AppBase/etc/nas/ to specify whether to enable the generation of NTA northbound files. The default value is FALSE.
Table 5-17 Specifying whether to enable the generation of NTA northbound files

Configuration Item

Description

Value

DUMP_ENABLE

Specifies whether to enable the generation of NTA northbound files.

true

Operation Result

After the configuration is complete, eSight periodically import original network traffic data to a northbound file and upload the file to the corresponding directory based on value of NBIFileStoragePath in Reference Information for nbi.xml.

For example, if the value of NBIFileStoragePath in Reference Information for nbi.xml is the default value /data/nbi, you can view northbound network traffic files with timestamps in <Installation directory>/AppBase/var/iemp/data/nbi/pmdatatemp/nas.

T150500_10.134.36.156.zip

After a third party logs in to the eSight FTP server using the user name, password, and authentication mode defined in the nbi.xml file, the following folder exists in the default root directory:

│ ├─nas

│ │ └─T150500_10.134.36.156.zip

Remarks: The following describes the fields in the name of a performance result file:

THHMMSS_deviceIP.zip

Field description:

  • HHMMSS: indicates the collection time (UTC time) in the 24-hour format. For example, 150500 indicates 15:05:00.
  • deviceIP: IP address of the network traffic device.

    The data format in the decompressed northbound network traffic file is as follows:

    3232235778|3232235777|0|106|105|1000000|100000|1|89|33584|6|8|0|0|0|0|0|1469883600020|1469883600020|8|1469883600020|10000161|0|0|0|0|0|0|0

    Table 5-18 Fields in the data file are as follows:

    No.

    Field

    Description

    Type

    Example

    Parsed Data

    1

    SRC_ADDR

    Source IP address.

    long

    3232235778

    192.168.1.2

    2

    DST_ADDR

    Destination IP address.

    long

    3232235777

    192.168.1.1

    3

    NEXTHOP

    Next-hop IP address.

    long

    0

    0

    4

    IN_INTERFACEID

    Input interface ID.

    int

    106

    106

    5

    OUT_INTERFACEID

    Output interface ID.

    int

    105

    105

    6

    BYTES

    Number of bytes.

    long

    1000000

    1000000

    7

    PACKETS

    Number of packets.

    long

    100000

    100000

    8

    FLOWS

    Number of network flows.

    long

    1

    1

    9

    SRC_PORT

    Source port number.

    int

    89

    89

    10

    DST_PORT

    Destination port number.

    int

    33584

    33584

    11

    PROTOCOLID

    Protocol.

    short

    6

    6

    12

    TOS

    Service type.

    short

    8

    8

    13~17

    -

    Reserved.

    int

    0

    -

    18

    FLOW_START_TIME

    Precise time when the flow starts. (absolute time)

    long

    1469883600020

    2016-07-30 21:00:00

    19

    FLOW_END_TIME

    Precise time when the flow ends. (absolute time)

    long

    1469883600020

    2016-07-30 21:00:00

    20

    DEVICEID

    Device ID.

    int

    8

    8

    21

    FC_TIME

    Flow collection time.

    long

    1469883600020

    2016-07-30 21:00:00

    22

    APPID

    Application ID.

    int

    10000161

    10000161

    23~29

    -

    Reserved.

    int

    0

    -

    Details about the IN_INTERFACEID, OUT_INTERFACEID, DEVICEID, and APPID fields must be obtained through the eSight northbound interface.

Translation
Download
Updated: 2019-10-30

Document ID: EDOC1100044386

Views: 17324

Downloads: 86

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next