vflow-snoop

This command is used to display the packet headers of flows directed to the switch CPU.

Syntax   vflow-snoop

count count-number

Specify the packet count.

display-packets-bytes display-packets-bytes 

Specify the number packet bytes.

name name-string

Specify the flow name.

Specify any of the following options:

id

Specify the ID assigned to the vFlow.

scope local|fabric

Specify the scope for the vFlow.

type ofp|vflow|ofp-default|acl-ip|acl-mac|vxlan|nat|qos|nat-twice| hog-violator|pbr

Specify the type of vFlow.

hidden true|false

Specify if the vFlow is hidden or not.

vlan vlan-id

Specify the VLAN identifier for the vFlow.

l2-nwr l2-net-name

Specify the Layer 2 network.

vnet vnet-name

Specify the virtual network (VNET) for the vFlow

in-port port-list

Specify the ingress (input) port for the vFlow.

out-port port-list

Specify the egress (output) port for the vFlow.

ether-type ipv4|arp|wake|rarp|vlan|ipv6|mpls-uni|mpls-multi|jumbo|aoe| dot1X|lldp|ecp|macsec|ptp|fcoe|fcoe-init|qinq

Specify the EtherType for the vFlow.

src-mac mac-address

Specify the source MAC address for the vFlow.

src-mac-mask mac-address

Specify the source MAC address wildcard mask for the vFlow.

dst-mac mac-address

Specify the destination MAC address for the vFlow.

dst-mac-mask mac-address

Specify the destination MAC address wildcard mask for the vFlow.

src-ip ip-address

Specify the source IP address for the vFlow.

src-ip-mask ip-address

Specify the source IP address wildcard mask for the vFlow.

dst-ip ip-address

Specify the destination IP address for the vFlow.

dst-ip-mask ip-address

Specify the destination IP address wildcard mask for the vFlow.

src-port src-port-number

Specify the Layer 3 protocol source port for the vFlow.

src-port-mask src-port-mask-number

Specify the source port mask.

dst-port dst-port-number

Specify the Layer 3 protocol destination port for the vFlow.

dst-port-mask dst-port-mask-number

Specify the destination port mask.

dscp-start number

Specify the starting DSCP number. This is a value between 0 and 63.

dscp-end number

Specify the ending DSCP number. This is a value between 0 and 63.

dscp dscp-number

Specify the 6-bit Differentiated Services Code Point (DSCP) of the flow.

dscp-map dscp-map name | none

Specify the DSCP map to apply on the flow. Please reapply if map priorities are updated.

[tos-start tos-start-number]

Specify the starting ToS number.

[tos-end tos-end-number]

Specify the ending ToS number.

tos tos-number 

Specify the Type of Service (ToS) number for the vFlow.

vlan-pri number

Specify the priority for the VLAN. This is a value between 0 (lowest) and 7 (highest).

proto tcp|udp|icmp|igmp|ip

Specify the Layer 3 protocol for the flow.

local-subnet|no-local-subnet

Specify a local subnet.

flow-class vflow-class name

Specify the vflow class.

ingress-tunnel tunnel-name

Specify the name of the ingress tunnel.

egress-tunnel tunnel-name

Specify the name of the egress tunnel.

bw-min bw-min-number

Specify the minimum bandwidth for the vFlow.

bw-max bw-max-number

Specify the maximum bandwidth for the vFlow (in Gbps).

precedence priority

Specify the traffic priority for the flow (between 0 and 10)

action none|drop|to-port|to-cpu|trap|copy-to-cpu|check|setvlan|tunnel-pkt|set-tunnel-id|to-span|
cpu-rx| cpu-rx-tx|
set-metadata|set-dscp|decap|set-dmac|set-dmac-to-port|
to-ports-and-cpu|set-vlan-pri|tcp-seq-offset| tcp-ack-offset|
l3-to-cpu-switch|set-smac|
drop-cancel-trap

Specify the forwarding action to apply to the flow.

action-value number

Specify an optional value argument for the forwarding action above (for example, a switch port number to forward the packet to). This is a value between 1 and 64.

action-value1 number

Specify a VLAN ID from 1 to 4096.

action-set-mac-value mac-address

Specify a MAC address value.

action-to-ports-value port-list

Specify a port list.

mirror mirror name

Specify a mirror name for the configuration.

process-mirror|
no-process-mirror

Specify if the vFLow processes mirrored traffic or not.

log-packets|
no-log-packets

Specify whether to log the packets in the flow.

packet-log-max packet-log-max-number

Specify the maximum packet count for log rotation in the flow.

log-stats|no-log-stats

Specify whether to enable packet statistics or logs for the flow.

stats-interval seconds

Specify the interval to update packet statistics for the log (in seconds). This is a value between 1 and 604800.

dur dur-number

Specify the minimum duration required for the flow to be captured (in seconds).

[metadata metadata-number]

[metadata-mask metadata-mask-number]

Specify the metadata number and mask for the vflow.

transient|no-transient

Specify whether to capture transient flows.

vxlan vxlan-name

Specify the name of the VXLAN.

vxlan-ether-type ipv4|arp|wake|rarp|vlan|ipv6|mpls-uni|mpls-multi| jumbo|aoe|
dot1X|lldp|ecp|macsec|ptp|fcoe|fcoe-init|qinq vxlan-proto tcp|udp|icmp|igmp|ip

Specify the type of VXLAN.

vxlan-proto tcp|udp|icmp|igmp|ip

 

hw-stats|no-hw-stats

 

set-src ip-address

Specify the source IP address of IPv4 packets.

set-dst ip-address

Specify the destination IP address of IPv4 packets.

set-src-port set-src-port-number

Specify the source port of IPv4 packets.

set-dst-port set-dst-port-number

Specify the destination port of IPv4 packets.

enable|no-enable

Specify if you want to enable or disable flows in hardware

table-name vflow-table name

Specify a table name from the following list:

SrcMac

DstMac

SrcIp

DstIp

OuterVlanId

OuterVlanPri

EtherType

The following actions are supported for this parameter:

InnerVlan

OuterVlan

Dscp

Vxlan

Drop

VlanPri

cpu-class cpu-class name

Specify the CPU class name.

Defaults   None.

Access   CLI

History   

Version 1.2

Command introduced.

Version 2.1

The parameter, type, is deprecated. The option, cluster, for scope is deprecated. The option, meter, for action is deprecated. The parameters, mirror|no mirror, and process-mirror|no-process-mirror, bw-min, and metadata added. The options, to-span|to-port-set-nat| cpu-rx|cpu-rx-tx added to the parameter action.

Version 2.2.3

The parameters, dscp-start, dscp-end, tos-start, tos-end, vlan-pri, action-value, mirror, and process-mirror added.

Version 2.3

The parameters, set-src, set-dst, set-src-port, and set-dst-port, added. The parameters, vxlan-proto and hw-stats added. The parameters action-set-mac-value and action-to-ports-value added.

Version 2.3.1

The parameter, table, added.

Version 2.4

The options, analytics|reserved deprecated from the parameter type. The options, ofp-default|acl-ip|acl-mac|vxlan|nat added to the parameter, type.

Version 2.5.4

The parameter, burst-size auto, has added functionality. You can configure a burst-size number between 256B through 128MB.

Version 2.6.0

The parameter, table-name, added.

Version 2.6.2

The parameter, dscp-map, added.

Usage   Each fabric, cluster, standalone switch, or virtual network can track application flow statistics. This command displays a running output of headers as they are directed to the switch CPU based on flow definitions specified for Layer 2 Ethernet or Layer 3 Internet Protocol (IP) packet traffic. The display output is stopped by pressing Control-C in the CLI.

Examples  This example displays the packet headers as they are directed to the switch CPU based on one or several flow definitions created with the command vflow-create and the action set to copy-to-cpu:

CLI network-admin@switch > vflow-snoop

vflow-snoop

switch: 471aac, flow: 40, port: 25, size: 64

smac: 02:08:20:17:26:77, dmac: 1e:1e:1e:ac:f3:62, vlan: 55, etype: arp

switch: 471aac, flow: 40, port: 13, size: 68

smac: 00:0c:fc:00:b9:6e, dmac: ff:ff:ff:ff:ff:ff, vlan: 1, etype: arp

switch: 471aac, flow: 40, port: 15, size: 68

smac: 00:0c:fc:00:b6:71, dmac: ff:ff:ff:ff:ff:ff, vlan: 1, etype: arp

 

 

See Also   

vflow-create

vflow-delete

vflow-modify

vflow-show

vflow-class-create

vflow-class-delete

vflow-class-show

vflow-stats-show