Using nta filtering strategies, Using nta, Filtering strategies – H3C Technologies H3C Intelligent Management Center User Manual

Page 56

Advertising
background image

46

the VPN instance as a whole. After completing the configuration, click OK to the right of the

parameter to make the configuration take effect.

Peak Traffic Analysis—The Peak Traffic Analysis option enables you to view the peak rates of
traffic analysis tasks and interfaces. Select Enable to view the peak rates of traffic analysis

tasks and interfaces. Select Disable if you do not want to view the peak rates of traffic analysis

tasks and interfaces. If you enable the Peak Traffic Analysis feature and select a time range in

the Query Time of the Traffic Query area that is a minimum of 6 hours earlier than the current
time, NTA displays the Peak Rate chart next to the Traffic Trend chart. After completing the

configuration, click OK to the right of the parameter to make the configuration take effect.

Real Time Traffic—The Real Time Traffic option enables NTA to automatically send query
packets to obtain traffic statistics. This function can reduce the time delay caused by passively

waiting for the traffic statistics packets. Select Enable if you want to use the Real Time Traffic

function. Select Disable if you do not want to use this function. After completing the
configuration, click OK to the right of the parameter to make the configuration take effect.

NTA Conversation Aggregation TopN—The NTA Conversation Aggregation TopN option
specifies whether to aggregate the TopN sessions. By default, NTA aggregates all sessions.

With this feature enabled, NTA aggregates only information of the topN sessions by traffic.

Information of other sessions is dropped. After completing the configuration, click OK to the

right of the parameter to make the configuration take effect.

TopN NTA Conversations for Aggregation—The TopN NTA Conversations for Aggregation
option specifies the TopN value for the NTA Conversation Aggregation TopN field. After

completing the configuration, click OK to the right of the parameter to make the configuration

take effect.

DNS Settings—The DNS Settings option allows you to enable or disable the DNS resolution
function for NTA. After enabling this function, you can specify DNS server IP addresses.

When a user queries the host information for an IP address, NTA uses the specified DNS
servers to query the domain name for the IP address.

{

To enable the function, select Enable from the DNS Settings list.

{

To add a DNS server IP address, enter a DNS server IP address in the DNS server IP field,
and then click Add. Repeat this operation to add more DNS server IP addresses.

{

To delete an existing DNS server IP address, select the IP address, and then click Delete.

After completing the configuration, click OK to make the configuration take effect.

NOTE:

You can specify only IPv4 addresses for DNS servers. You can specify up to five DNS server IP addresses.

Using NTA filtering strategies

NTA is a NetStream v5/v9, NetFlow v5/v9 and sFlow v5 collection server, and is a centralized data

collector and analyzer for devices that forward network flow records to it. Filter strategies in NTA enable
you to define whether network flow records or the log packets that NTA receives are processed and

analyzed by NTA or discarded. You can choose to process and analyze or discard packets based on

their source or destination IP address, source or destination Layer 4 port number. You can also process

or discard TCP, UDP, or ICMP traffic. Otherwise, you can analyze or discard traffic based on one or more
combinations of source and destination IP address, port number and protocol.

Advertising