Application Fingerprinting Database - Alcatel-Lucent OmniSwitch 9900 Series Network Configuration Manual

Configuring Application Fingerprinting
The "app-regex.txt" file contains a sample configuration to use as a guide for defining AFP application
signatures and groups (see

Application Fingerprinting Database

When a match occurs between an IP traffic flow and a REGEX application signature, the following multi-
tuple classifier is generated and stored in a local switch database to identify and track the application
associated with the flow:
•
Ingress Port
•
Dest MAC
•
Src MAC
•
VLAN
•
Dest IP
•
Src IP
•
Dest Port
•
Src Port
Each database entry is subject to a 15 minute aging period. If the database fills up, older entries are aged
out before the 15 minute limit (fast aging). However, fast aging is not applied to database entries
associated with QoS. In this case, the QoS is removed after the regular 15 minute aging time period
expires. When a database entry is removed due to regular aging or fast aging conditions, any
corresponding QoS is also removed for that flow.
In addition, a packet counter for each application on the ingress Application Fingerprinting port is kept for
statistics generation. The database classification entries and statistics are displayed using Application
Fingerprinting show commands (see
OmniSwitch AOS Release 8 Network Configuration Guide
"AFP Defaults" on page
"Verifying the AFP Configuration" on page
30-2).
December 2017
AFP Overview
30-18).
page 30-8