Help Center/ Enterprise Router/ User Guide/ Flow Logs/ Viewing Details About a Flow Log
Updated on 2024-10-14 GMT+08:00

Viewing Details About a Flow Log

Scenarios

This section describes how to view details about a flow log, including the attachment ID, source/destination address, source/destination port, data packet size, and packet quantity.

Constraints

Flow logs are generated every 10 minutes. After creating a VPC flow log, you need to wait about 10 minutes before you can view the flow log record.

Procedure

  1. Go to the enterprise router list.
  2. Search for the target enterprise router by name.
  3. Click the enterprise router name and click Flow Logs.

    The flow log list is displayed.

  4. Locate the target flow log and click View Log Record in the Operation column.

    The LTS console is displayed.

  5. View details about the flow log.

    Flow log format:

    <version> <project_id> <resource_id> <instance_id> <srcaddr> <dstaddr> <srcport> <dstport> <protocol> <packets> <bytes> <start> <end> <direct>

    Example 1:

    1 0605768ad980d5762f8ac010b919754c 9e00a67c-b21e-435f-9da6-20004b8392e9 a5cbd16c-7d99-4000-8f14-526ec48298ce 1.1.1.1 192.168.1.199 0 0 1 229 22442 1664007127 1664007727 ingress

    Example 2:

    1 0605768ad980d5762f8ac010b919754c 9e00a67c-b21e-435f-9da6-20004b8392e9 a5cbd16c-7d99-4000-8f14-526ec48298ce 192.168.1.199 1.1.1.1 8 0 1 229 22442 1664007127 1664007727 egress

    Table 1 describes the flow log parameters.

    Table 1 Enterprise router flow log parameters

    Parameter

    Description

    Example

    version

    Flow log version

    1

    project_id

    Project ID

    5f67944957444bd6bb4fe3b367de8f3d

    resource_id

    ID of the attachment that the traffic is generated for

    10a163ee-6efa-4e4d-9937-ead59f308497

    instance_id

    Enterprise router ID

    a5cbd16c-7d99-4000-8f14-526ec48298ce

    srcaddr

    Source IP address

    192.168.0.154

    dstaddr

    Destination IP address

    192.168.3.25

    srcport

    Source port

    38929

    dstport

    Destination port

    53

    protocol

    Internet Assigned Numbers Authority (IANA) protocol number of the traffic

    For more information, see Internet Protocol Numbers.

    17

    packets

    Number of data packets during the flow log capture

    1

    bytes

    Size of the data packet during the flow log capture

    96

    start

    The time when the capture started, in Unix seconds

    1548752136

    end

    The time when the capture ended, in Unix seconds

    1548752736

    direct

    Traffic direction

    • ingress: traffic going in to the attachment
    • egress: traffic going out of the attachment

    egress