R3204P16-HP Load Balancing Module System Maintenance Configuration Guide-6PW101

30
Item Descri
p
tion
Refresh Period
Set the refresh period on the log information displayed on the log report web
interface.
You can select manual refresh or automatic refresh:
• Manual: You need to refresh the web interface when displaying log report
information.
• Automatic: You can select to refresh the web page every 10 seconds, 30
seconds, 1 minute, 5 minutes, or 10 minutes.
Configuring user logging
User logs can be output in the following two formats, and you can select either one:
• Output to the information center of the LB module in the format of system information, and the
information center then decides the output destination.
• Output to the specified userlog log host in UDP packets in binary format.
At present, user logs only comprise flow logs.
NOTE:
• At present, flow logs refer to session logs only. To generate flow logs, you need to configure session
logging.
• The LB module supports configuring flow logs on the web interface or at the command line interface
(CLI).
Introduction
Flow logging records users’ access information to the external network. The LB module classifies and
calculates flows through the 5-tuple information, which includes source IP address, destination IP address,
source port, destination port, and protocol number, and generates user flow logs. Flow logging records
the 5-tuple information of the packets and number of the bytes received and sent. With flow logging,
administrators can track and record accesses to the network, facilitating the availability and security of
the network.
Two versions are available with flow logging: version 1.0 and version 3.0, which are slightly different in
packet format. For details, see the following two tables.
Table 6 Packet format in flow logging version 1.0
Field Descri
p
tion
SourceIP Source IP address
DestIP Destination IP address
SrcPort TCP/UDP source port number
DestPort TCP/UDP destination port number
StartTime Start time of a flow, in seconds, counted from 1970/1/1 0:0
EndTime End time of a flow, in seconds, counted from 1970/1/1 0:0
Prot Protocol carried over IP