HP MSR2000/3000/4000 Router Series Security Command Reference

372
Usage guidelines
This command sets the aging time for stable sessions of the application layer protocols that are not
supported by the session aging-time application command. For persistent sessions, the aging time is set
by the session persistent acl command.
Examples
# Set the aging time for TCP sessions in SYN-SENT and SYN-RCV states to 60 seconds.
<Sysname> system-view
[Sysname] session aging-time state syn 60
Related commands
• display session aging-time state
• session aging-time application
• session persistent acl
session log bytes-active
Use session log bytes-active to set the byte-based threshold for traffic-based logging.
Use undo session log bytes-active to restore the default.
Syntax
session log bytes-active bytes-value
undo session log bytes-active
Default
The device does not output session logs based on the byte-based threshold.
Views
System view
Predefined user roles
network-admin
Parameters
bytes-value: Sets the byte-based threshold in the range of 1 to 1000 MB.
Usage guidelines
Support for this command depends on your device model.
If you set both the traffic-based and time-based logging, the device outputs a session log when whichever
is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for
the session.
If you set both the byte-based and packet-based thresholds, the last configuration takes effect.
Examples
# Configure the device to output session logs on a per-10-MB basis.
<Sysname> system-view
[Sysname] session log bytes-active 10
Related commands
• session log enable