No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - Network Management and Monitoring

CloudEngine 8800, 7800, 6800, and 5800 V200R005C10

This document describes the configurations of Network Management and Monitoring, including SNMP, RMON, NETCONF, OpenFlow, LLDP, NQA, Mirroring, Packet Capture, Packet Trace, Path and Connectivity Detection Configuration, NetStream, sFlow, and iPCA.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Understanding sFlow

Understanding sFlow

Architecture of an sFlow System

As shown in Figure 15-1, the sFlow system involves an sFlow agent embedded in a Huawei switch or router and a remote sFlow collector. The sFlow agent obtains traffic statistics from an interface using sampling and encapsulates them into sFlow packets. When an sFlow packet buffer overflows or an sFlow packet expires (normally the expiry period is 1 second), the sFlow agent sends the sFlow packets to the sFlow collector. The sFlow collector analyzes these sFlow packets and displays the traffic statistics in a report.

Figure 15-1 sFlow system

sFlow Sampling

An sFlow agent provides flow sampling and counter sampling.

Flow sampling

In flow sampling, an sFlow agent copies packets in one direction or both directions on an interface based on the sampling rate, parses the packets, and encapsulates packets and parsing result into sFlow packets. Flow sampling focuses on traffic details to monitor and parse traffic behavior on the network.

Table 15-1 describes the data types that may be contained in an sFlow packet. All this information is encapsulated into an sFlow packet and then sent to a collector.

Table 15-1 Main fields in flow sampling packets



Raw packet

Records the entire packet or part of the packet header.

Ethernet Frame Data

Analyzes Ethernet headers in Ethernet frames.

IPv4 Data

Analyzes IPv4 headers in IPv4 packets.

IPv6 Data

Analyzes IPv6 headers in IPv6 packets.

Extended Switch Data

Records VLAN translation and 802.1Q priority mapping information in Ethernet frames. VLAN ID 0 indicates an invalid VLAN.

Extended Router Data

Records routing information for packets.

Counter sampling

Under counter sampling, an agent periodically obtains traffic statistics on an interface. Table 15-2 describes the main fields in counter sampling packets.

Table 15-2 Main fields in counter sampling packets



Generic Interface Counters

Records the basic information and traffic statistics on an interface.

Ethernet Interface Counters

Records the traffic statistics on an Ethernet interface.

Processor Information

Records the CPU usage and memory usage of a device.

sFlow Packet Format

sFlow packets are encapsulated in UDP packets. By default, sFlow packets are transmitted by known port 6343.

sFlow packets use the following packet header formats:
  • Flow sample
  • Expanded Flow sample
  • Counter sample
  • Expanded Counter sample
Expanded Flow sample and Expanded Counter sample are additions in sFlow version 5 and are extensions to Flow sample and Counter sample, but they are not compatible with earlier versions. All expanded sampling packets must be encapsulated with the expanded sampling packet header.
Updated: 2019-04-20

Document ID: EDOC1100075365

Views: 36531

Downloads: 123

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next