Posted on May 10, 2016 2:02 pm
 |  Asked by Jon Zeolla
 |  197 views
0
0
Print Friendly, PDF & Email

I’m running a 7150 in tap aggregation mode.  Is there a way to do a cutoff after a certain amount of data is sent (say, 12k) for a given 5 tuple?  For instance, if I have packets coming in for 1.1.1.1:1 -> 2.2.2.2:2 tcp, and 8k is transferred, send everything to the tool port, but if I have 3.3.3.3:3 -> 4.4.4.4:4 tcp and 10g is being transferred, stop sending to the tool port after 12k.  It would also be nice to set policies such as if dst port == 443 then cutoff == 8k (essentially BPF filters).  My search of these forums turned up nothing.  Thanks,

Jon

0
Posted by Mark Berly
Answered on May 14, 2016 3:22 pm

Joe – Those are great ideas, unfortunately they are not supported. It would not be too hard to build this feature using an external sflow collector and eAPI call back to the Arista tap agg switch to perform the required config to filter the traffic. If you are interested in this idea I maybe able to find a few people looking for a fun extensibility project to help out…

Hey Mark,

I am very interested in this idea and would be more than happy to put some hours into figuring it out. Thanks,

Jon

(Jon Zeolla at May 16, 2016 2:50 pm)

Post your Answer

You must be logged in to post an answer.