排查Host-bound流量案例时,更常用 的是使用命令monitor traffic interface命令:

常用配置示例命令:

  1. Match an IP address: monitor traffic interface ge-0/0/x matching "host 10.130.38.94"

  2. Match a network: monitor traffic interface ge-0/0/x matching "net 10.1.1.0/24"

  3. Match a port: monitor traffic interface ge-0/0/x matching "port 22"

  4. Match TCP port 179: monitor traffic interface ge-0/0/x matching "tcp port 179"

  5. Match UDP port 646: monitor traffic interface ge-0/0/x matching "udp port 646"

  6. Match ARP: monitor traffic interface ge-0/0/x matching arp

  7. Match OSPF: monitor traffic interface ge-0/0/x no-resolve matching "ip proto 89"

  8. Match "not tcp port 3128" and match "tcp port 23": monitor traffic interface ge-0/0/x matching "not tcp port 3128 and tcp port 23"

  9. Match ISIS packets: monitor traffic interface xe-5/0/0.1 matching iso

  10. Match MPLS packets: monitor traffic interface xe-5/0/0.1 matching mpls

  11. Match IPv6 packets: monitor traffic interface xe-5/0/0.1 matching ip6

  12. Match packets sent to a particular destination: monitor traffic interface xe-5/0/0.1 matching "dst host 172.16.1.1"

  13. Match packets coming from a particular source: monitor traffic interface xe-5/0/0.1 matching "src host 192.168.1.1"

  14. Match packets with a specific source MAC address: monitor traffic interface xe-5/0/0.1 matching "ether src b0:a8:6e:70:fb:39"

  15. Match ICMPv4 packets from/for a specific address: monitor traffic interface ge-0/0/0.0 matching "icmp && host 172.16.1.2"

  16. Match ICMPv6 packets: monitor traffic interface xe-5/0/0.1 matching icmp6

  17. Match LDP packets, along with a specific address: monitor traffic interface ae5.0 matching "tcp && port 646 && host 192.168.2.2"