OmniSwitch os6900, Руководство по настройке сети

Страница: 755 / 942

Configuring Application Fingerprinting AFP Overview
OmniSwitch AOS Release 7 Network Configuration Guide June 2013 page 28-9
The “app-regex.txt” file contains a sample configuration to use as a guide for defining AFP application
signatures and groups (see
“AFP Defaults” on page 28-3 ).
Application Fingerprinting Database
When a match occurs between an IP traffic flow and a REGEX application signature, the following multi-
tuple classifier is generated and stored in a local switch database to identify and track the application asso-
ciated with the flow:
•
Ingress Port,
•
Dest MAC
•
Src MAC
•
VLAN
•
Dest IP
•
Src IP
•
Dest Port
•
Src Port
Each database entry is subject to a 15 minute aging period. If the database fills up, older entries are aged
out before the 15 minute limit (fast aging). However, fast aging is not applied to database entries associ-
ated with QoS. In this case, the QoS is removed after the regular 15 minute aging time period expires.
When a database entry is removed due to regular aging or fast aging conditions, any corresponding QoS is
also removed for that flow.
In addition, a packet counter for each application on the ingress Application Fingerprinting port is kept for
statistics generation. The database classification entries and statistics are displayed using Application
Fingerprinting
show commands (see “Verifying the AFP Configuration” on page 28-19 ).