Juniper JUNOS OS 10.4 - RELEASE NOTES REV 5 Release Note page 89

New Features in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
Flow and Processing
J-Flow V9 support —This feature is supported on SRX100, SRX210, SRX220, SRX240,
SRX650, and all J Series devices.
J-Flow Services Export Version 9 (J-Flow V9) provides an extensible and flexible method
for using templates to observe packets on a router. Each template indicates the format
in which the device exports data.
In Junos OS Release 10.4, PIC-based J-Flow V9 is introduced along with J-Flow V5 and
V8, which were disabled in Junos OS Release 9.4.
[Junos OS CLI User Guide, Junos OS Interfaces Configuration Guide for Security Devices]
Packet capture—This feature is supported on SRX1400, SRX3400, SRX3600,
SRX5600, and SRX5800 devices.
Packet capture is a datapath-debugging feature that helps you effectively create a
filter for specific traffic and apply an action profile to the traffic. The action profile
specifies a variety of actions at different processing units. One of the supported actions
is packet dump, which sends the packet to the Routing Engine and stores it in propriety
form. You can view the packets by entering the
show security datapath-debug capture
command.
The performance of packet capture is improved and is comparable to the trace
performance.
[Junos OS Security Configuration Guide]
Screen logs—Screen log enhancement is supported on all SRX Series and J Series
devices.
The new log format captures all required information in the screen log. This allows you
to view all log information for a device instead of having to search through
device-specific logs.
The new log structure is as follows:
<67>1 2009-08-18T19:47:23.191 srx5800-00 RT_IDS
- RT_SCREEN_TCP [junos@2636.1.1.1.2.26 attack-name="SYN flood Src-IP based!"
source-address="112.0.0.110" source-port="80" destination-address="111.0.0.113"
destination-port="3033" source-zone-name="mobiles" interface-name="reth1.112"
action="alarm-without-drop"]
[Junos OS Security Configuration Guide]
Copyright © 2011, Juniper Networks, Inc. 89