Example: Sampling All FTP Traffic
The following configuration gathers statistical information about a moderate percentage of packets using FTP in the output path of a specific ethernet interface, and collects the information in a file named et-ftp-traffic.txt.
Create a filter:
[edit firewall family inet]
filter ftp-stats {
term ftp-usage {
from {
destination-port [ftp ftp-data];
}
then {
sample;
accept;
}
}
}
Apply the filter to the interface:
[edit interfaces]
et-7/0/2 {
unit 0 {
family inet {
filter {
input ftp-stats;
}
address 10.35.78.254/32 {
destination 10.35.78.4;
}
}
}
}
Finally, gather statistics on 10 percent of the candidate samples:
[edit forwarding-options]
sampling {
input {
rate 10;
}
family inet {
output {
file {
filename et-ftp-traffic.txt;
files 50;
size 1m;
}
}
}
}