Benutzer-Werkzeuge

Webseiten-Werkzeuge


aos_r8_app-mon_abfrage_packet_count

Abfrage von Statistiken zu App-Mon Regeln in AOS R8

"show active policy rule"

Normalerweise arbeiten wir mit diesem Befehl um Details zu Policy Regeln abzufragen z.B. Packets/Bytes die gematched haben. Im Fall von App-Mon Policies sind diese Werte aber nicht zu sehen, wie im folgenden Fall für die Applikation TeamViewer.

OS6860E-> show active policy rule 
Rule name                        : TeamViewer
  From                           = ldap,
  Precedence                     = 30001,
  Condition name                 = TeamViewerCondition,
  Action name                    = TeamViewerAction,
  Validity period name           = AllTheTime

Rule name                        : sip-snooping
  Condition name                 = sip-snooping,
  Action name                    = sip-snooping,
  Packets                        = 2230,
  Bytes                          = 1214292

"show app-mon app-list enforcement active" mit Hilfe von "egrep" (einfach)

Mit diesem Kommando können wir sehen welche Applikationen von Smart Analytics auf dem OmniSwitch 6860E erkannt wurden. Wir schränken die Ausgabe exemplarisch auf die Applikationen Yammer, Xing, Web.de und TeamViewer ein. Für Unternehmen bedeutet dies dass entsprechende Regeln für die HTTPS-basierten Applikationen durchgesetzt werden könnten (Bandbreite begrenzen, Priorität festlegen, DROP (für z.B. Dropbox)).

Ohne egrep bekommt man natürlich die vollständige Liste ausgegeben! egrep -i ignoriert die Groß- und Kleinschreibung und „|“ bedeutet oder.

OS6860E-> show app-mon app-list enforcement active | egrep -i "yammer|xing|web_de|teamviewer"
2581   web_de                                                                Web                               0               288             
516    xing                                                                  Web                               0               234             
519    yammer                                                                Web                               3               189             
545    teamviewer                                                            Thin Client                       0               13              

"show app-mon app-list enforcement active" mit "awk" eingrenzen (einfach)

Mit folgendem Kommando ist es möglich sich die umfangreiche Liste von Applikationen auf die Ausgaben zu reduzieren die als Applikation im Netzwerk auch wirklich erkannt wurden.

OS6860E-> show app-mon app-list enforcement active | awk '{if (NF >= 2) if ($(NF-1) > 0 || $(NF) > 0) {print $0};}'
Legend: Application-name: *= Not present in recently updated kit,
App-Id Application                                                           App-Grp                          Matched         Matched
       Name                                                                  Name                             Flow Count      Gross Count
742    msrpc                                                                 Middleware                        0               161             
191    soap                                                                  Middleware                        0               536             
97     krb5                                                                  Authentication                    60              10881           
158    radius                                                                Authentication                    0               38              
75     imap                                                                  Mail                              0               15              
76     imaps                                                                 Mail                              2               49              
110    mapi                                                                  Mail                              2               307             
186    smtp                                                                  Mail                              0               752             
208    tds                                                                   Database                          1               1               
1293   bmff                                                                  Audio/Video                       0               18              
530    itunes                                                                Audio/Video                       1               361             
174    rtcp                                                                  Audio/Video                       10              288             
175    rtp                                                                   Audio/Video                       11              1662            
182    sip                                                                   Audio/Video                       87              846             
534    spotify                                                               Audio/Video                       0               103             
597    viber                                                                 Audio/Video                       0               11              
1069   vimeo                                                                 Audio/Video                       0               26              
2444   vine                                                                  Audio/Video                       0               1               
1118   apns                                                                  Application Service               3               360             
1106   appstore                                                              Application Service               3               536             
37     epm                                                                   Application Service               1               988             
1122   google_play                                                           Application Service               4               361             
1126   icloud                                                                Application Service               1               1755            
1744   iminent                                                               Application Service               0               53              
1119   ios_ota_update                                                        Application Service               0               42              
136    nspi                                                                  Application Service               2               384             
149    portmap                                                               Application Service               5               8699            
1121   samsung_apps                                                          Application Service               0               100             
196    srvloc                                                                Application Service               0               78              
204    syslog                                                                Application Service               4               2080            
1111   windows_marketplace                                                   Application Service               0               13              
29     dhcp                                                                  Network Service                   6               4726            
32     dns                                                                   Network Service                   392             1033281         
128    nbns                                                                  Network Service                   3               263             
137    ntp                                                                   Network Service                   7               26782           
1504   websocket                                                             Network Service                   1               8               
2245   king                                                                  Game                              0               47              
2179   the_simpsons_tapped_out                                               Game                              0               12              
342    xboxlive                                                              Game                              0               88              
1257   58com                                                                 Web                               0               59              
956    accuweather                                                           Web                               0               15              
2231   addthis                                                               Web                               0               82              
2280   adobe                                                                 Web                               0               108             
1556   adobe_online_office                                                   Web                               0               39              
549    adobe_update                                                          Web                               0               106             
2529   adtech                                                                Web                               0               148             
2587   advertising_com                                                       Web                               0               3               
1284   akamai                                                                Web                               0               140             
968    amazon                                                                Web                               0               401             
2207   amazon_adsystem                                                       Web                               0               131             
1183   amazon_aws                                                            Web                               0               531             
1240   amazon_video                                                          Web                               0               106             
2209   aol                                                                   Web                               0               231             
2535   aol_one                                                               Web                               0               18              
306    apple                                                                 Web                               4               3672            
2518   apple_location                                                        Web                               1               1163            
1481   apple_siri                                                            Web                               0               37              
563    apple_update                                                          Web                               0               18              
2531   appnexus                                                              Web                               0               244             
2334   appsflyer                                                             Web                               0               7               
1755   avg                                                                   Web                               0               1               
714    avg_update                                                            Web                               0               2               
1512   bet365                                                                Web                               0               5               
2028   bild                                                                  Web                               0               73              
547    bing                                                                  Web                               0               356             
974    blogger                                                               Web                               0               28              
2322   brightcove                                                            Web                               0               15              
2449   cedexis                                                               Web                               0               47              
567    chrome_update                                                         Web                               0               30              
1445   cloudflare                                                            Web                               0               247             
988    cnn                                                                   Web                               0               54              
773    concur                                                                Web                               0               29              
2319   crashlytics                                                           Web                               0               337             
2279   criteo                                                                Web                               0               161             
2301   crittercism                                                           Web                               0               1               
779    dropbox                                                               Web                               0               108             
34     ebay                                                                  Web                               0               63              
2016   edgecast                                                              Web                               0               47              
1495   evernote                                                              Web                               0               2               
244    facebook                                                              Web                               0               854             
556    firefox_update                                                        Web                               0               57              
550    flashplugin_update                                                    Web                               0               24              
300    flickr                                                                Web                               0               11              
2519   flipboard                                                             Web                               0               9               
2300   flurry                                                                Web                               0               96              
2340   freewheel                                                             Web                               0               1               
1094   funshion                                                              Web                               0               1               
2483   gcs                                                                   Web                               0               1               
54     google                                                                Web                               13              3112            
2150   google_accounts                                                       Web                               0               65              
247    google_ads                                                            Web                               1               1178            
744    google_analytics                                                      Web                               0               214             
1104   google_appengine                                                      Web                               0               10              
800    google_cache                                                          Web                               0               210             
2502   google_calendar                                                       Web                               0               10              
1489   google_docs                                                           Web                               0               3               
55     google_earth                                                          Web                               0               22              
57     google_maps                                                           Web                               0               359             
1125   google_plus                                                           Web                               0               25              
2288   google_safebrowsing                                                   Web                               0               300             
801    google_translate                                                      Web                               0               12              
2336   gravatar                                                              Web                               0               9               
1001   groupon                                                               Web                               0               50              
745    gstatic                                                               Web                               1               395             
1451   here                                                                  Web                               0               20              
67     http                                                                  Web                               9               33064           
68     https                                                                 Web                               46              261298          
1483   imgur                                                                 Web                               0               2               
2525   indexexchange                                                         Web                               0               21              
2333   inmobi                                                                Web                               0               11              
2299   inneractive                                                           Web                               0               10              
1175   instagram                                                             Web                               0               44              
561    java_update                                                           Web                               0               12              
2348   liverail                                                              Web                               0               7               
2526   lotame                                                                Web                               0               6               
1454   lync_online                                                           Web                               1               1742            
1468   mapquest                                                              Web                               0               9               
2445   mixpanel                                                              Web                               0               27              
1019   monster                                                               Web                               0               10              
1020   mozilla                                                               Web                               0               177             
125    myspace                                                               Web                               0               1               
1030   nba                                                                   Web                               0               11              
2344   nielsen                                                               Web                               0               18              
461    ning                                                                  Web                               0               3               
1448   office365                                                             Web                               17              5520            
2416   onclickads                                                            Web                               0               5               
2523   openx                                                                 Web                               0               103             
578    opera_update                                                          Web                               0               26              
1753   orange                                                                Web                               0               4               
1478   outlook                                                               Web                               5               1742            
1747   paypal                                                                Web                               0               2               
1470   pinterest                                                             Web                               0               17              
1039   playstation                                                           Web                               0               121             
2524   pubmatic                                                              Web                               0               107             
1241   qq_web                                                                Web                               0               2               
2238   quantcast                                                             Web                               0               78              
1413   qunar                                                                 Web                               0               2               
2536   rlcdn                                                                 Web                               0               16              
922    rss                                                                   Web                               0               53              
1046   rtl                                                                   Web                               0               6               
2527   rubiconproject                                                        Web                               0               35              
844    salesforce                                                            Web                               0               198             
2303   samsung                                                               Web                               0               22              
2237   scorecardresearch                                                     Web                               0               92              
1453   sharepoint_online                                                     Web                               0               233             
1178   shazam                                                                Web                               0               2               
2530   sizmek                                                                Web                               0               37              
850    skydrive                                                              Web                               0               20              
1051   slideshare                                                            Web                               0               1               
2446   smartadserver                                                         Web                               0               94              
1469   spdy                                                                  Web                               0               102             
1465   speedtest                                                             Web                               0               36              
1052   spiegel                                                               Web                               0               169             
2350   stickyads                                                             Web                               0               46              
1056   surveymonkey                                                          Web                               0               4               
2250   symantec                                                              Web                               0               2               
1763   t_online                                                              Web                               0               316             
2558   thevideos                                                             Web                               0               10              
860    tidaltv                                                               Web                               0               9               
2277   truste                                                                Web                               0               24              
2236   turn                                                                  Web                               0               4               
2343   turner                                                                Web                               0               1               
503    twitter                                                               Web                               0               633             
2581   web_de                                                                Web                               0               295             
222    wikipedia                                                             Web                               0               14              
1288   windows_azure                                                         Web                               0               16              
562    windows_update                                                        Web                               0               448             
298    windowslive                                                           Web                               3               9229            
297    wordpress                                                             Web                               0               11              
516    xing                                                                  Web                               2               319             
1294   yahoo                                                                 Web                               0               107             
234    yahoo_search                                                          Web                               0               7               
519    yammer                                                                Web                               5               300             
523    yandex                                                                Web                               0               5               
240    youtube                                                               Web                               1               185             
2481   bjnp                                                                  Printer                           0               52397           
170    rsh                                                                   Terminal                          0               1               
209    telnet                                                                Terminal                          0               2               
190    snmp                                                                  Network Management                184             331480          
305    linkedin                                                              Forum                             0               435             
2215   tapatalk                                                              Forum                             0               2               
51     gmail                                                                 Webmail                           0               113             
1116   gmx                                                                   Webmail                           0               88              
141    owa                                                                   Webmail                           0               1               
236    ymail2                                                                Webmail                           0               10              
111    mcafee                                                                Security Service                  0               2               
45     ftp                                                                   File Server                       0               638             
46     ftp_data                                                              File Server                       0               22              
131    nfs                                                                   File Server                       2               473             
211    tftp                                                                  File Server                       0               1343            
545    teamviewer                                                            Thin Client                       0               13              
220    vmware                                                                Thin Client                       0               2               
85     ipsec                                                                 Encrypted                         2               6               
92     isakmp                                                                Encrypted                         1               4               
330    ocsp                                                                  Encrypted                         0               649             
198    ssh                                                                   Encrypted                         1               5283            
1913   bits                                                                  File Transfer                     0               75              
1912   imessage_file_download                                                File Transfer                     0               7               
4      unknown                                                               Standard                          60              38859           
275    aim_express                                                           Instant Messaging                 0               37              
281    aims                                                                  Instant Messaging                 0               10              
2331   facebook_messenger                                                    Instant Messaging                 0               10              
1441   gtalk                                                                 Instant Messaging                 2               73              
94     jabber                                                                Instant Messaging                 0               2               
183    skype                                                                 Instant Messaging                 0               209             
1568   touch                                                                 Instant Messaging                 0               6025            
1093   whatsapp                                                              Instant Messaging                 0               74              
Number of Applications: 2069

"show app-mon app-list enforcement active stats"

Erweitert man das vorherige Kommando um das Keyword stats so bekommt man die gesuchten Ausgaben zu Packets/Bytes dargestellt.

OS6860E-> show app-mon app-list enforcement active stats                                                                                               

Legend: Application-name: *= Not present in recently updated kit,

App-Id Application                                                           App-Grp                          Matched Active   Matched Active  Matched Gross  Matched Gross
       Name                                                                  Name                             Packet Count     Byte Count      Packet Count   Byte Count
------+---------------------------------------------------------------------+--------------------------------+----------------+---------------+--------------+----------------
9      amqp                                                                  Middleware                        0               0               0               0
26     dcerpc                                                                Middleware                        0               0               0               0
914    diop                                                                  Middleware                        0               0               0               0
49     giop                                                                  Middleware                        0               0               0               0
752    giops                                                                 Middleware                        0               0               0               0
913    iiop                                                                  Middleware                        0               0               0               0
2439   java_rmi                                                              Middleware                        0               0               0               0
... (Ausgabe eingeschränkt, sonst sehr viele Zeilen)
1093   whatsapp                                                              Instant Messaging                 0               0               11296           7236508
237    ymsg                                                                  Instant Messaging                 0               0               0               0
238    ymsg_conf                                                             Instant Messaging                 0               0               0               0
276    ymsg_webmessenger                                                     Instant Messaging                 0               0               0               0
874    yoono                                                                 Instant Messaging                 0               0               0               0
1297   youni                                                                 Instant Messaging                 0               0               0               0
2345   zalo                                                                  Instant Messaging                 0               0               0               0
883    zoho_im                                                               Instant Messaging                 0               0               0               0
Number of Applications: 2069

"show app-mon app-list enforcement active stats" Ausgabe mit Unterstützung von "awk" eingrenzen (einfach)

Für dieses Kommando werden ebenfalls sehr viele Zeilen für Applikationen ausgegeben die im Netzwerk zwar erkannt und behandelt werden könnten, aber derzeit nicht verwendet wurden. Mit awk kann die Ausgabe auf aktive/erkannte Applikationen reduziert werden.

OS6860E-> show app-mon app-list enforcement active stats | awk '{if (NF >= 4) if ($(NF-3) > 0 || $(NF-2) > 0 || $(NF-1) > 0 || $(NF) > 0) {print $0};}'
Legend: Application-name: *= Not present in recently updated kit,
App-Id Application                                                           App-Grp                          Matched Active   Matched Active  Matched Gross  Matched Gross
       Name                                                                  Name                             Packet Count     Byte Count      Packet Count   Byte Count
742    msrpc                                                                 Middleware                        0               0               2030            413459
191    soap                                                                  Middleware                        0               0               4954            1190350
97     krb5                                                                  Authentication                    8               1045            83772           21380922
158    radius                                                                Authentication                    0               0               245             47644
75     imap                                                                  Mail                              0               0               1204            769864
76     imaps                                                                 Mail                              2               172             2524            904466
110    mapi                                                                  Mail                              120             33810           34329           6457215
186    smtp                                                                  Mail                              0               0               10898           1520433
208    tds                                                                   Database                          29767           13861778        29767           13861778
1293   bmff                                                                  Audio/Video                       0               0               2561            1853293
530    itunes                                                                Audio/Video                       0               0               334333          241793788
174    rtcp                                                                  Audio/Video                       2303            500734          35502           8340392
175    rtp                                                                   Audio/Video                       560693          125913126       8934889         1987155632
182    sip                                                                   Audio/Video                       792137          598237170       816414          618548210
534    spotify                                                               Audio/Video                       0               0               85032           60293811
597    viber                                                                 Audio/Video                       0               0               90              11968
1069   vimeo                                                                 Audio/Video                       0               0               16041           11618010
2444   vine                                                                  Audio/Video                       0               0               23              7527
1118   apns                                                                  Application Service               58              18964           6881            2175780
1106   appstore                                                              Application Service               0               0               1136283         714879033
37     epm                                                                   Application Service               0               0               12374           1747886
1122   google_play                                                           Application Service               33              9214            5718            1657727
1126   icloud                                                                Application Service               9               674             87608           41448541
1744   iminent                                                               Application Service               0               0               525             90745
1119   ios_ota_update                                                        Application Service               0               0               704291          537647566
136    nspi                                                                  Application Service               0               0               2853            809977
149    portmap                                                               Application Service               64              5344            54201           4527542
1121   samsung_apps                                                          Application Service               2               164             2483            836372
196    srvloc                                                                Application Service               0               0               5368            483676
204    syslog                                                                Application Service               794396          181652272       817145          186106844
1111   windows_marketplace                                                   Application Service               0               0               693             409037
29     dhcp                                                                  Network Service                   37600           21009992        49983           26134379
32     dns                                                                   Network Service                   5546            565715          1786505         189164639
128    nbns                                                                  Network Service                   31              3917            1875            196503
137    ntp                                                                   Network Service                   7348            704024          51309           4928166
1504   websocket                                                             Network Service                   1213            91006           3509            292316
2245   king                                                                  Game                              0               0               588             119286
2179   the_simpsons_tapped_out                                               Game                              0               0               3779            3478592
342    xboxlive                                                              Game                              0               0               1698            661068
1257   58com                                                                 Web                               0               0               801             470359
956    accuweather                                                           Web                               0               0               193             61673
2231   addthis                                                               Web                               0               0               2852            1455394
2280   adobe                                                                 Web                               0               0               2941            1082737
1556   adobe_online_office                                                   Web                               0               0               1381            577857
549    adobe_update                                                          Web                               0               0               3132            1415254
2529   adtech                                                                Web                               0               0               4894            1978323
2587   advertising_com                                                       Web                               0               0               18              3685
1284   akamai                                                                Web                               0               0               6042267         4631533222
968    amazon                                                                Web                               0               0               27764           13623034
2207   amazon_adsystem                                                       Web                               0               0               2604            613429
1183   amazon_aws                                                            Web                               4               316             2344680         1413992657
1240   amazon_video                                                          Web                               0               0               732693          486080469
2209   aol                                                                   Web                               0               0               12371           3857864
2535   aol_one                                                               Web                               0               0               1721            1073764
306    apple                                                                 Web                               29              11250           1439711         743107257
2518   apple_location                                                        Web                               0               0               70660           38261485
1481   apple_siri                                                            Web                               0               0               3260            1295713
563    apple_update                                                          Web                               0               0               688684          517096376
2531   appnexus                                                              Web                               0               0               6737            2647071
2334   appsflyer                                                             Web                               0               0               157             44584
1755   avg                                                                   Web                               0               0               7               1701
714    avg_update                                                            Web                               0               0               20              5370
1512   bet365                                                                Web                               0               0               1045            597577
2028   bild                                                                  Web                               0               0               3762            2406182
547    bing                                                                  Web                               0               0               6890            3174779
974    blogger                                                               Web                               0               0               1394            660956
2322   brightcove                                                            Web                               0               0               808             456663
2449   cedexis                                                               Web                               0               0               1251            419683
567    chrome_update                                                         Web                               0               0               342             102689
1445   cloudflare                                                            Web                               0               0               22509           13732911
988    cnn                                                                   Web                               0               0               2074            724629
773    concur                                                                Web                               0               0               4572            2626673
2319   crashlytics                                                           Web                               0               0               11550           3730876
2279   criteo                                                                Web                               0               0               3902            1377370
2301   crittercism                                                           Web                               0               0               27              8430
779    dropbox                                                               Web                               0               0               140468          102495130
34     ebay                                                                  Web                               0               0               1710            704892
2016   edgecast                                                              Web                               0               0               3079            1612601
1495   evernote                                                              Web                               0               0               107             48441
244    facebook                                                              Web                               2275            1561248         365836          249264881
556    firefox_update                                                        Web                               0               0               165005          133791200
550    flashplugin_update                                                    Web                               0               0               495             200583
300    flickr                                                                Web                               0               0               3516            2288130
2519   flipboard                                                             Web                               0               0               189             53409
2300   flurry                                                                Web                               0               0               2896            922053
2340   freewheel                                                             Web                               0               0               30              2895
1094   funshion                                                              Web                               0               0               32              4800
2483   gcs                                                                   Web                               0               0               19              8753
54     google                                                                Web                               801             127294          238882          120228620
2150   google_accounts                                                       Web                               1               82              2097            690735
247    google_ads                                                            Web                               503             283626          70904           28385825
744    google_analytics                                                      Web                               37              14246           10863           3210653
1104   google_appengine                                                      Web                               0               0               160             45308
800    google_cache                                                          Web                               3               242             36190           22318207
2502   google_calendar                                                       Web                               0               0               489             125392
1489   google_docs                                                           Web                               0               0               180             71911
55     google_earth                                                          Web                               0               0               112892          71956461
57     google_maps                                                           Web                               1               82              25938           14025587
1125   google_plus                                                           Web                               0               0               2971            1409349
2288   google_safebrowsing                                                   Web                               1860            1615516         42111           22516395
801    google_translate                                                      Web                               0               0               1056            248220
2336   gravatar                                                              Web                               0               0               188             57307
1001   groupon                                                               Web                               0               0               1737            632275
745    gstatic                                                               Web                               2               168             45350           26962542
1451   here                                                                  Web                               0               0               1285            569829
67     http                                                                  Web                               3352            2909219         4770755         3497164987
68     https                                                                 Web                               766382          674822840       23632758        21125200296
1483   imgur                                                                 Web                               0               0               105             32067
2525   indexexchange                                                         Web                               0               0               454             119055
2333   inmobi                                                                Web                               0               0               141             66601
2299   inneractive                                                           Web                               0               0               108             30336
1175   instagram                                                             Web                               0               0               5702            4709761
561    java_update                                                           Web                               0               0               344             153237
2348   liverail                                                              Web                               0               0               205             58757
2526   lotame                                                                Web                               0               0               88              30360
1454   lync_online                                                           Web                               0               0               51873           34184730
1468   mapquest                                                              Web                               0               0               264             91262
2445   mixpanel                                                              Web                               0               0               913             295610
1019   monster                                                               Web                               0               0               264             122835
1020   mozilla                                                               Web                               0               0               7936            3490073
125    myspace                                                               Web                               0               0               30              6538
1030   nba                                                                   Web                               0               0               1609            1025133
2344   nielsen                                                               Web                               0               0               368             89365
461    ning                                                                  Web                               0               0               37984           42107682
2235   nokia                                                                 Web                               0               0               17              6415
1448   office365                                                             Web                               17737           10708564        926946          546844763
2416   onclickads                                                            Web                               0               0               114             55239
2523   openx                                                                 Web                               0               0               2313            1089233
578    opera_update                                                          Web                               0               0               2259            765263
1753   orange                                                                Web                               0               0               226             46470
1478   outlook                                                               Web                               1               86              49723           25332371
1747   paypal                                                                Web                               0               0               53              20447
1470   pinterest                                                             Web                               0               0               814             320179
1039   playstation                                                           Web                               0               0               2842            1306633
2524   pubmatic                                                              Web                               0               0               1744            650028
1241   qq_web                                                                Web                               0               0               24              3174
2238   quantcast                                                             Web                               0               0               995             256235
1413   qunar                                                                 Web                               0               0               19              3063
2536   rlcdn                                                                 Web                               0               0               201             64879
922    rss                                                                   Web                               0               0               2738            1840085
1046   rtl                                                                   Web                               0               0               442             258935
2527   rubiconproject                                                        Web                               0               0               1634            649311
844    salesforce                                                            Web                               1217            343956          34352           18780107
2303   samsung                                                               Web                               1               82              239             53547
2237   scorecardresearch                                                     Web                               0               0               1903            447625
1453   sharepoint_online                                                     Web                               1               74              149074          139794799
1178   shazam                                                                Web                               0               0               45              12714
2530   sizmek                                                                Web                               0               0               1982            1150853
850    skydrive                                                              Web                               6               444             763             391687
1051   slideshare                                                            Web                               0               0               13              8654
2446   smartadserver                                                         Web                               0               0               3902            1424464
1469   spdy                                                                  Web                               0               0               10624           4820475
1465   speedtest                                                             Web                               0               0               67633           46874056
1052   spiegel                                                               Web                               0               0               8017            4448315
2350   stickyads                                                             Web                               0               0               1388            447543
1056   surveymonkey                                                          Web                               0               0               31              2606
2250   symantec                                                              Web                               0               0               113             67957
1763   t_online                                                              Web                               0               0               13813           6504875
2558   thevideos                                                             Web                               0               0               72414           54760011
860    tidaltv                                                               Web                               0               0               103             27910
2277   truste                                                                Web                               0               0               635             223100
2236   turn                                                                  Web                               0               0               85              25625
2343   turner                                                                Web                               0               0               41              7003
503    twitter                                                               Web                               2               164             36690           20416429
2581   web_de                                                                Web                               0               0               22822           11691591
222    wikipedia                                                             Web                               0               0               2218            1309412
1288   windows_azure                                                         Web                               0               0               2115            1436833
562    windows_update                                                        Web                               14599           11142913        335741          279785423
298    windowslive                                                           Web                               8393            1283304         417489          265723683
297    wordpress                                                             Web                               0               0               324             58422
516    xing                                                                  Web                               0               0               19851           9376096
1294   yahoo                                                                 Web                               0               0               3179            1219260
234    yahoo_search                                                          Web                               0               0               602             282169
519    yammer                                                                Web                               998             367026          17455           7386359
523    yandex                                                                Web                               0               0               122             53623
240    youtube                                                               Web                               6649            7117607         338512          283573076
2481   bjnp                                                                  Printer                           0               0               2546972         163099250
170    rsh                                                                   Terminal                          0               0               12              2436
209    telnet                                                                Terminal                          0               0               258             32738
190    snmp                                                                  Network Management                561409          136373697       5740841         1761520003
305    linkedin                                                              Forum                             0               0               35153           18287140
2215   tapatalk                                                              Forum                             0               0               73              35290
51     gmail                                                                 Webmail                           5               559             40910           24637364
1116   gmx                                                                   Webmail                           0               0               3331            1752392
141    owa                                                                   Webmail                           0               0               9               1766
236    ymail2                                                                Webmail                           0               0               2525            2511246
111    mcafee                                                                Security Service                  0               0               59              34130
45     ftp                                                                   File Server                       0               0               19378           1780894
46     ftp_data                                                              File Server                       0               0               4520            3356278
131    nfs                                                                   File Server                       15028           19777248        1735624         2257351736
211    tftp                                                                  File Server                       8               932             1070            119379
545    teamviewer                                                            Thin Client                       0               0               194169          65404672
220    vmware                                                                Thin Client                       0               0               12177           1430186
85     ipsec                                                                 Encrypted                         3695465         807135409       4682100         1355808959
92     isakmp                                                                Encrypted                         12993           3142652         894886          202447573
330    ocsp                                                                  Encrypted                         194             46037           12663           2746251
198    ssh                                                                   Encrypted                         2963            1333331         2052131         1901131898
1913   bits                                                                  File Transfer                     0               0               172898          169861483
1912   imessage_file_download                                                File Transfer                     0               0               7065            5839675
4      unknown                                                               Standard                          2439358         1233030268      6338771         3483685869
275    aim_express                                                           Instant Messaging                 0               0               2675            1393141
281    aims                                                                  Instant Messaging                 0               0               278             96207
2331   facebook_messenger                                                    Instant Messaging                 0               0               322             64405
1441   gtalk                                                                 Instant Messaging                 178             19031           1282            213770
94     jabber                                                                Instant Messaging                 0               0               45711           3339429
183    skype                                                                 Instant Messaging                 0               0               4688            2064810
1568   touch                                                                 Instant Messaging                 3               222             155403          61660008
1093   whatsapp                                                              Instant Messaging                 0               0               11296           7236508
Number of Applications: 2069

"show app-mon app-list enforcement active stats" Ausgabe mit Unterstützung von "awk" optimieren (fortgeschritten)

Normalerweise gibt das Kommando die Werte für „Bytes“ eben auch als solche aus, allerdings fällt es beim Überfliegen der Liste nicht immer leicht sofort einen griffigen Wert im Kopf zu haben. Mit der Unterstützung von awk können die Werte von Bytes in Megabytes (MB) umgerechnet werden, was leichter zu erfassen ist.

Die Werte werden nur als Megabytes dargestellt wenn mehr als 1 MB übertragen wurde, sonst verbleibt der Wert in Bytes.

OS6860E-> show app-mon app-list enforcement active stats | awk -F"[ ]{2,}" 'FNR <= 6 {print $0}; FNR > 6 && NF >= 4 { if (int($5) > 1048576) $5=sprintf("%.2f MB",$5/1024/1024); if (int($7) > 1048576) $7=sprintf("%.2f MB",$7/1024/1024); if ($4 > 0 || $5 > 0 || $6 > 0 || $7 > 0) printf "%-6s %-69s %-32s %-16s %-15s %-14s %-16s\n", $1, $2, $3, $4, $5, $6, $7; else next; }'

Legend: Application-name: *= Not present in recently updated kit,

App-Id Application                                                           App-Grp                          Matched Active   Matched Active  Matched Gross  Matched Gross
       Name                                                                  Name                             Packet Count     Byte Count      Packet Count   Byte Count
------+---------------------------------------------------------------------+--------------------------------+----------------+---------------+--------------+----------------
742    msrpc                                                                 Middleware                       0                0               2030           413459          
191    soap                                                                  Middleware                       0                0               4954           1,14 MB         
97     krb5                                                                  Authentication                   49               17301           83876          20,42 MB        
158    radius                                                                Authentication                   0                0               245            47644           
75     imap                                                                  Mail                             0                0               1204           769864          
76     imaps                                                                 Mail                             2                172             2524           904466          
110    mapi                                                                  Mail                             142              35722           34351          6,16 MB         
186    smtp                                                                  Mail                             0                0               10924          1,45 MB         
208    tds                                                                   Database                         30234            13,30 MB        30234          13,30 MB        
1293   bmff                                                                  Audio/Video                      0                0               2561           1,77 MB         
530    itunes                                                                Audio/Video                      0                0               334396         230,62 MB       
174    rtcp                                                                  Audio/Video                      3481             764858          36791          8,23 MB         
175    rtp                                                                   Audio/Video                      849400           181,47 MB       9247425        1962,14 MB      
182    sip                                                                   Audio/Video                      793354           571,44 MB       817633         590,81 MB       
534    spotify                                                               Audio/Video                      0                0               85032          57,50 MB        
597    viber                                                                 Audio/Video                      0                0               90             11968           
1069   vimeo                                                                 Audio/Video                      0                0               16041          11,08 MB        
2444   vine                                                                  Audio/Video                      0                0               23             7527            
1118   apns                                                                  Application Service              2                160             6885           2,08 MB         
1106   appstore                                                              Application Service              0                0               1136338        681,80 MB       
37     epm                                                                   Application Service              0                0               12385          1,67 MB         
1122   google_play                                                           Application Service              507              375627          6705           2,15 MB         
1126   icloud                                                                Application Service              2                160             88165          39,79 MB        
1744   iminent                                                               Application Service              0                0               525            90745           
1119   ios_ota_update                                                        Application Service              0                0               704291         512,74 MB       
136    nspi                                                                  Application Service              0                0               2853           809977          
149    portmap                                                               Application Service              33               2770            54250          4,32 MB         
1121   samsung_apps                                                          Application Service              16               2650            2524           846594          
196    srvloc                                                                Application Service              0                0               5368           483676          
204    syslog                                                                Application Service              795468           173,47 MB       818223         177,72 MB       
1111   windows_marketplace                                                   Application Service              0                0               722            423362          
29     dhcp                                                                  Network Service                  37766            20,10 MB        50179          25,00 MB        
32     dns                                                                   Network Service                  5604             574371          1792187        181,07 MB       
128    nbns                                                                  Network Service                  19               2717            1879           197088          
137    ntp                                                                   Network Service                  7365             705646          51391          4,71 MB         
1504   websocket                                                             Network Service                  1285             96346           3581           297656          
2245   king                                                                  Game                             0                0               588            119286          
2179   the_simpsons_tapped_out                                               Game                             0                0               3779           3,32 MB         
342    xboxlive                                                              Game                             0                0               1698           661068          
1257   58com                                                                 Web                              0                0               801            470359          
956    accuweather                                                           Web                              0                0               193            61673           
2231   addthis                                                               Web                              0                0               2852           1,39 MB         
2280   adobe                                                                 Web                              0                0               3123           1,19 MB         
1556   adobe_online_office                                                   Web                              0                0               1488           618255          
549    adobe_update                                                          Web                              3                222             4113           2,20 MB         
2529   adtech                                                                Web                              0                0               4894           1,89 MB         
2587   advertising_com                                                       Web                              0                0               18             3685            
1284   akamai                                                                Web                              0                0               6042267        4416,97 MB      
968    amazon                                                                Web                              17               1394            27868          13,02 MB        
2207   amazon_adsystem                                                       Web                              0                0               2604           613429          
1183   amazon_aws                                                            Web                              9                692             2344963        1348,64 MB      
1240   amazon_video                                                          Web                              0                0               732693         463,56 MB       
2209   aol                                                                   Web                              0                0               12371          3,68 MB         
2535   aol_one                                                               Web                              0                0               1721           1,02 MB         
306    apple                                                                 Web                              4                304             1458239        718,36 MB       
2518   apple_location                                                        Web                              0                0               70691          36,50 MB        
1481   apple_siri                                                            Web                              0                0               3343           1,26 MB         
563    apple_update                                                          Web                              0                0               688684         493,14 MB       
2531   appnexus                                                              Web                              0                0               6824           2,56 MB         
2334   appsflyer                                                             Web                              0                0               157            44584           
1755   avg                                                                   Web                              0                0               7              1701            
714    avg_update                                                            Web                              0                0               20             5370            
1512   bet365                                                                Web                              0                0               1045           597577          
2028   bild                                                                  Web                              0                0               3762           2,29 MB         
547    bing                                                                  Web                              0                0               6890           3,03 MB         
974    blogger                                                               Web                              0                0               1394           660956          
2322   brightcove                                                            Web                              0                0               808            456663          
2449   cedexis                                                               Web                              72               24551           1478           506464          
567    chrome_update                                                         Web                              0                0               342            102689          
1445   cloudflare                                                            Web                              1                74              22545          13,11 MB        
988    cnn                                                                   Web                              0                0               2074           724629          
773    concur                                                                Web                              0                0               4572           2,50 MB         
2319   crashlytics                                                           Web                              0                0               11627          3,59 MB         
2279   criteo                                                                Web                              68               32618           4052           1,37 MB         
2301   crittercism                                                           Web                              0                0               27             8430            
779    dropbox                                                               Web                              0                0               140468         97,75 MB        
34     ebay                                                                  Web                              0                0               1710           704892          
2016   edgecast                                                              Web                              0                0               3079           1,54 MB         
1495   evernote                                                              Web                              0                0               107            48441           
244    facebook                                                              Web                              8                632             366216         237,82 MB       
556    firefox_update                                                        Web                              2                148             165007         127,59 MB       
550    flashplugin_update                                                    Web                              0                0               495            200583          
300    flickr                                                                Web                              0                0               3516           2,18 MB         
2519   flipboard                                                             Web                              0                0               189            53409           
2300   flurry                                                                Web                              0                0               2896           922053          
2340   freewheel                                                             Web                              0                0               30             2895            
1094   funshion                                                              Web                              0                0               32             4800            
2483   gcs                                                                   Web                              0                0               19             8753            
54     google                                                                Web                              627              89820           239349         114,78 MB       
2150   google_accounts                                                       Web                              0                0               2100           691004          
247    google_ads                                                            Web                              15               1496            72756          28,49 MB        
744    google_analytics                                                      Web                              8                794             10928          3,08 MB         
1104   google_appengine                                                      Web                              0                0               160            45308           
800    google_cache                                                          Web                              0                0               36227          21,29 MB        
2502   google_calendar                                                       Web                              0                0               489            125392          
1489   google_docs                                                           Web                              0                0               180            71911           
55     google_earth                                                          Web                              0                0               112892         68,62 MB        
57     google_maps                                                           Web                              2                164             25942          13,38 MB        
1125   google_plus                                                           Web                              1                86              2972           1,34 MB         
2288   google_safebrowsing                                                   Web                              1                74              42152          21,48 MB        
801    google_translate                                                      Web                              0                0               1056           248220          
2336   gravatar                                                              Web                              0                0               188            57307           
1001   groupon                                                               Web                              0                0               1737           632275          
745    gstatic                                                               Web                              4                324             45352          25,71 MB        
1451   here                                                                  Web                              0                0               1285           569829          
67     http                                                                  Web                              1722             1,44 MB         4779159        3341,55 MB      
68     https                                                                 Web                              861323           695,02 MB       23757764       20211,64 MB     
1483   imgur                                                                 Web                              0                0               105            32067           
2525   indexexchange                                                         Web                              0                0               468            123894          
2333   inmobi                                                                Web                              0                0               141            66601           
2299   inneractive                                                           Web                              0                0               108            30336           
1175   instagram                                                             Web                              0                0               5702           4,49 MB         
561    java_update                                                           Web                              0                0               344            153237          
2348   liverail                                                              Web                              0                0               221            64487           
2526   lotame                                                                Web                              0                0               88             30360           
1454   lync_online                                                           Web                              0                0               51873          32,60 MB        
1468   mapquest                                                              Web                              0                0               264            91262           
2445   mixpanel                                                              Web                              0                0               913            295610          
1019   monster                                                               Web                              0                0               264            122835          
1020   mozilla                                                               Web                              1                74              8099           3,38 MB         
125    myspace                                                               Web                              0                0               30             6538            
1030   nba                                                                   Web                              0                0               1609           1025133         
2344   nielsen                                                               Web                              0                0               368            89365           
461    ning                                                                  Web                              0                0               37984          40,16 MB        
2235   nokia                                                                 Web                              0                0               17             6415            
1448   office365                                                             Web                              24730            16,50 MB        942553         535,00 MB       
2416   onclickads                                                            Web                              0                0               114            55239           
2523   openx                                                                 Web                              0                0               2313           1,04 MB         
578    opera_update                                                          Web                              0                0               2259           765263          
1753   orange                                                                Web                              0                0               226            46470           
1478   outlook                                                               Web                              63               25812           49931          24,25 MB        
1747   paypal                                                                Web                              0                0               53             20447           
1470   pinterest                                                             Web                              0                0               814            320179          
1039   playstation                                                           Web                              0                0               2842           1,25 MB         
2524   pubmatic                                                              Web                              0                0               1744           650028          
1241   qq_web                                                                Web                              0                0               24             3174            
2238   quantcast                                                             Web                              0                0               995            256235          
1413   qunar                                                                 Web                              0                0               19             3063            
2536   rlcdn                                                                 Web                              0                0               201            64879           
922    rss                                                                   Web                              0                0               2738           1,75 MB         
1046   rtl                                                                   Web                              0                0               442            258935          
2527   rubiconproject                                                        Web                              0                0               1634           649311          
844    salesforce                                                            Web                              2278             657302          37016          18,74 MB        
2303   samsung                                                               Web                              1                82              239            53547           
2237   scorecardresearch                                                     Web                              1                74              1923           454348          
1453   sharepoint_online                                                     Web                              21723            20,63 MB        455140         411,67 MB       
1178   shazam                                                                Web                              0                0               45             12714           
2530   sizmek                                                                Web                              0                0               1982           1,10 MB         
850    skydrive                                                              Web                              0                0               1012           560056          
1051   slideshare                                                            Web                              0                0               13             8654            
2446   smartadserver                                                         Web                              0                0               3919           1,36 MB         
1469   spdy                                                                  Web                              0                0               10624          4,60 MB         
1465   speedtest                                                             Web                              0                0               67633          44,70 MB        
1052   spiegel                                                               Web                              0                0               8017           4,24 MB         
2350   stickyads                                                             Web                              0                0               1388           447543          
1056   surveymonkey                                                          Web                              0                0               31             2606            
2250   symantec                                                              Web                              0                0               113            67957           
1763   t_online                                                              Web                              0                0               13813          6,20 MB         
2558   thevideos                                                             Web                              0                0               72414          52,22 MB        
860    tidaltv                                                               Web                              0                0               103            27910           
2277   truste                                                                Web                              1                74              654            230486          
502    tumblr                                                                Web                              7                703             7              703             
2236   turn                                                                  Web                              0                0               85             25625           
2343   turner                                                                Web                              0                0               41             7003            
503    twitter                                                               Web                              0                0               36711          19,48 MB        
2581   web_de                                                                Web                              0                0               22822          11,15 MB        
222    wikipedia                                                             Web                              0                0               2218           1,25 MB         
1288   windows_azure                                                         Web                              0                0               2115           1,37 MB         
562    windows_update                                                        Web                              0                0               345102         273,70 MB       
298    windowslive                                                           Web                              8362             1,20 MB         417945         253,61 MB       
297    wordpress                                                             Web                              0                0               324            58422           
516    xing                                                                  Web                              6                444             22385          10,63 MB        
1294   yahoo                                                                 Web                              0                0               3193           1,17 MB         
234    yahoo_search                                                          Web                              0                0               602            282169          
519    yammer                                                                Web                              1357             489365          18288          7,39 MB         
523    yandex                                                                Web                              0                0               122            53623           
240    youtube                                                               Web                              0                0               398744         336,25 MB       
2481   bjnp                                                                  Printer                          0                0               2546972        155,54 MB       
170    rsh                                                                   Terminal                         0                0               12             2436            
209    telnet                                                                Terminal                         0                0               258            32738           
190    snmp                                                                  Network Management               562500           130,34 MB       5743835        1680,97 MB      
305    linkedin                                                              Forum                            121              26666           37987          18,73 MB        
2215   tapatalk                                                              Forum                            0                0               73             35290           
51     gmail                                                                 Webmail                          5                559             40939          23,50 MB        
1116   gmx                                                                   Webmail                          0                0               3331           1,67 MB         
141    owa                                                                   Webmail                          0                0               9              1766            
236    ymail2                                                                Webmail                          0                0               2525           2,39 MB         
111    mcafee                                                                Security Service                 0                0               59             34130           
45     ftp                                                                   File Server                      0                0               19439          1,70 MB         
46     ftp_data                                                              File Server                      0                0               4520           3,20 MB         
131    nfs                                                                   File Server                      15035            18,86 MB        1735631        2152,78 MB      
211    tftp                                                                  File Server                      8                932             1070           119379          
545    teamviewer                                                            Thin Client                      0                0               194169         62,37 MB        
220    vmware                                                                Thin Client                      0                0               12177          1,36 MB         
85     ipsec                                                                 Encrypted                        3699185          770,57 MB       4685820        1293,83 MB      
92     isakmp                                                                Encrypted                        15153            3,47 MB         897046         193,54 MB       
330    ocsp                                                                  Encrypted                        90               19699           13556          2,83 MB         
198    ssh                                                                   Encrypted                        3072             1,32 MB         2052602        1813,15 MB      
1913   bits                                                                  File Transfer                    0                0               172898         161,99 MB       
1912   imessage_file_download                                                File Transfer                    0                0               7065           5,57 MB         
4      unknown                                                               Standard                         2443953          1179,60 MB      6346709        3327,94 MB      
275    aim_express                                                           Instant Messaging                0                0               2675           1,33 MB         
281    aims                                                                  Instant Messaging                0                0               278            96207           
2331   facebook_messenger                                                    Instant Messaging                0                0               322            64405           
1441   gtalk                                                                 Instant Messaging                168              16959           1354           222518          
94     jabber                                                                Instant Messaging                0                0               45711          3,18 MB         
183    skype                                                                 Instant Messaging                0                0               4715           1,98 MB         
1568   touch                                                                 Instant Messaging                3                222             155563         58,86 MB        
1093   whatsapp                                                              Instant Messaging                0                0               11296          6,90 MB         

"show app-mon ipv4-flow-table enforcement verbose"

Die bisherigen Ausgaben ließen keinen Rückschluss auf den Nutzer der Applikation zu. Selbstverständlich ist eine solche Ausgabe möglich, in diesem Fall eingeschränkt auf die Applikation „firefox_update“.

OS6860E-> show app-mon ipv4-flow-table enforcement verbose | grep firefox_update -C 1
2016-09-25/19:38:59/CEST    0d 0h 49m 36s 
52.222.169.89    172.30.0.19      80         59093      TCP        firefox_update       
Web                              -                                20368            15134039        
--
2016-09-25/20:27:41/CEST    0d 0h 0m 54s 
54.191.11.118    172.30.0.50      443        51276      TCP        firefox_update       
Web                              -                                1                74              

grep -C 1 gibt jeweils eine Zeile vor und nach dem gesuchten Begriff aus

aos_r8_app-mon_abfrage_packet_count.txt · Zuletzt geändert: 2016/09/27 14:24 von benny