Configuring Session Log Export; Displaying And Maintaining Session Management - HP 6600 Security Configuration Manual

Configuring session log export

Session logs are exported in the form of flow logs.
To configure session log exporting:
Step
1. Enter system view.
2. Specify the flow log
version.
3. Specify the source IP
address for UDP
packets carrying flow
logs.
4. Specify the IP address
and UDP port number
of the flow log server.
5. Specify to export flow
logs to the information
center.
For more information about flow log functions, see Network Management and Monitoring Configuration
Guide. For more information about flow log commands, see Network Management and Monitoring
Command Reference.

Displaying and maintaining session management

Task
Display the session aging times for
application layer protocols.
Display the session aging times in
different protocol states.
Display session count on the specified
card.
Display information about sessions
Command
system-view
userlog flow export version version-number
userlog flow export source-ip ip-address
userlog flow export slot slot-number
[ vpn-instance vpn-instance-name ] host
ip-address udp-port
userlog flow syslog
Command
display application aging-time [ |
{ begin | exclude | include }
regular-expression ]
display session aging-time [ | { begin
| exclude | include }
regular-expression ]
display session hardware slot
slot-number [ | { begin | exclude |
include } regular-expression ]
display session table [ slot
slot-number ] [ source-ip source-ip ]
[ destination-ip destination-ip ]
[verbose ] [ | { begin | exclude |
include } regular-expression ]
459
Remarks
N/A
Optional.
1.0 by default.
Optional.
IP address of the interface
sending UDP packets by
default.
Not specified by default.
Optional.
Flow logs are exported to the
flow log server by default.
Remarks
Available in any view.
Available in any view.
Available in any view.
This command is supported
only by the SPE-FWM-200,
SPE-IPS-200, SPE-ACG-200,
and FIP600 cards.
Available in any view.
This command is not
supported by the
SPE-FWM-200, SPE-IPS-200,
SPE-ACG-200, and FIP600
cards.