Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note page 81

New Features in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
Flow and Processing
NetFlow V9 support —This feature is supported on SRX100, SRX210, SRX220, SRX240,
SRX650, and all J Series devices.
NetFlow Services Export Version 9 (NetFlow V9) provides an extensible and flexible
method for using templates to observe packets on a router. Each template indicates
the format in which the device exports data.
In Junos OS Release 10.4, PIC-based Netflow V9 is supported, along with Netflow V5
and V8, which were disabled in Junos OS Release 9.4. Routing Engine-based Netflow
has been supported since Junos OS Release 9.4.
[Junos OS CLI User Guide, Junos OS Interfaces Configuration Guide for Security Devices]
Packet capture—This feature is supported on SRX1400, SRX3400, SRX3600,
SRX5600, and SRX5800 devices.
Packet capture is a datapath-debugging feature that helps you effectively create a
filter for specific traffic and apply an action profile to the traffic. The action profile
specifies a variety of actions at different processing units. One of the supported actions
is packet dump, which sends the packet to the Routing Engine and stores it in propriety
form. You can view the packets by entering the show security datapath-debug capture
command.
The performance of packet capture is improved and is comparable to the trace
performance.
[Junos OS Security Configuration Guide]
Screen logs—Screen log enhancement is supported on all SRX Series and J Series
devices.
The new log format captures all required information in the screen log. This allows you
to view all log information for a device instead of having to search through
device-specific logs.
The new log structure is as follows:
<67>1 2009-08-18T19:47:23.191 srx5800-00 RT_IDS
- RT_SCREEN_TCP [junos@2636.1.1.1.2.26 attack-name="SYN flood Src-IP based!"
source-address="112.0.0.110" source-port="80" destination-address="111.0.0.113"
destination-port="3033" source-zone-name="mobiles" interface-name="reth1.112"
action="alarm-without-drop"]
[Junos OS Security Configuration Guide]
Copyright © 2010, Juniper Networks, Inc. 81