【MX-SRX】使用Monitor traffic interface监控到达设备本身接口流量

排查Host-bound流量案例时，更常用 的是使用命令monitor traffic interface命令：

常用配置示例命令：

1. Match an IP address: monitor traffic interface ge-0/0/x matching "host 10.130.38.94"

2. Match a network: monitor traffic interface ge-0/0/x matching "net 10.1.1.0/24"

3. Match a port: monitor traffic interface ge-0/0/x matching "port 22"

4. Match TCP port 179: monitor traffic interface ge-0/0/x matching "tcp port 179"

5. Match UDP port 646: monitor traffic interface ge-0/0/x matching "udp port 646"

6. Match ARP: monitor traffic interface ge-0/0/x matching arp

7. Match OSPF: monitor traffic interface ge-0/0/x no-resolve matching "ip proto 89"

8. Match "not tcp port 3128" and match "tcp port 23": monitor traffic interface ge-0/0/x matching "not tcp port 3128 and tcp port 23"

9. Match ISIS packets: monitor traffic interface xe-5/0/0.1 matching iso

10. Match MPLS packets: monitor traffic interface xe-5/0/0.1 matching mpls

11. Match IPv6 packets: monitor traffic interface xe-5/0/0.1 matching ip6

12. Match packets sent to a particular destination: monitor traffic interface xe-5/0/0.1 matching "dst host 172.16.1.1"

13. Match packets coming from a particular source: monitor traffic interface xe-5/0/0.1 matching "src host 192.168.1.1"

14. Match packets with a specific source MAC address: monitor traffic interface xe-5/0/0.1 matching "ether src b0:a8:6e:70:fb:39"

15. Match ICMPv4 packets from/for a specific address: monitor traffic interface ge-0/0/0.0 matching "icmp && host 172.16.1.2"

16. Match ICMPv6 packets: monitor traffic interface xe-5/0/0.1 matching icmp6

17. Match LDP packets, along with a specific address: monitor traffic interface ae5.0 matching "tcp && port 646 && host 192.168.2.2"

转载于:https://blog.51cto.com/8019770/2383998