05-03-2009 11:13 AM
Hello friends
Is there S-FLOW feature like J-FLOW and C-FLOW for session analysis?
What are the third party sotware which supports S-FLOW and J-FLOW both?
05-03-2009 11:23 AM
Hi
There is no J-Flow kind of support on ScreenOS unfortunately. I think there is another thread wheresomeone also asked the same question:
http://forums.juniper.net/jnet/board/message?board
05-10-2009 12:04 PM
Hi WL,
Thank you for answering. Then how can we do the session analysis of screen OS devices? It can be done through STRM product?
05-11-2009 10:06 AM
You can use the following tools:
05-11-2009 12:50 PM
For the NSM, I guess you may not know where to find the steps:
(i) Via NSM
- Right Click on the device
- Select View Statistics
- Go to Resource Statistics
- Select Session Utilization or Active Status which should show all the sessions as well
Also note that there is a file size limit for all the tools which Cesar has mentioned.
For :https://tools.juniper.net/fsa/ (not larger than 32MB) and same for the NSSA (I have had huge session files which were not able to be parsed by the NSSA tool).
In that case the only way is to use linux to parse the session file something like this:
grep -A 1 id filename> | grep -v id | grep if | awk '{print $3}' | awk -F: '{print $2}' | awk -F, '{print $1}' | sort | uniq -c | sort -nr | more or > <filename for analysis>
*note above is just an example, of course there are many ways to do the analysis.
Also, you can use the private netscreen MIBs for session utilization (not really doing session analysis):
05-18-2009 06:11 PM
WL,
I'm not aware of any known size limitations with NSSA. I've used it to analyze several session table snapshots combined into one. What kind of limitations have you ran into?
-Tim Eberhard
05-18-2009 08:26 PM