Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

packet-log (Security IDP Sensor Configuration)

date_range 17-Dec-24

Syntax

content_copy zoom_out_map
packet-log {
    host (Security IDP Sensor Configuration) <ip-address>;
    port <port number>;
    max-sessions (Security Packet Log) <percentage>;
    threshold-logging-interval <minutes>;
    source-address (Security IDP Sensor Configuration) <ip-address>;
    ssl-profile-name <profile-name>;
total-memory <percentage>}

Syntax (Logical Systems and Tenant Systems)

content_copy zoom_out_map
packet-log {
    host (Security IDP Sensor Configuration) <ip-address>;
    port <port number>;
    source-address (Security IDP Sensor Configuration) <ip-address>;
    ssl-profile-name <profile-name>;
    threshold-logging-interval <minutes>}

Hierarchy Level

content_copy zoom_out_map
[edit security idp sensor-configuration]
[edit tenants tenant name security idp sensor-configuration]
[edit logical-systems logical system name security idp sensor-configuration]

Description

Configure the sensor for packet capture. This configuration defines the amount of memory to be allocated for packet capture and the maximum number of sessions that can generate packet capture data for the device at one time. The configuration also identifies the source address and host address for transmission of the completed packet capture object.

Options

  • ssl-profile-name profile-name —SSL initiation profile name to be used for encrypted packet log transmission.

    Starting in Junos OS Release 22.1R1, you can enable a secure SSL connection and send encrypted IDP packet capture log to the packet capture receiver. To establish the SSL connection, you must specify the SSL initiation profile that you want to use in the IDP packet log configuration.

    The SSL profile name must be configured in the SSL initiation profile configuration. SSL initiation profile configuration performs the required SSL certificates and SSL handshake operations to establish a secure connection. SSL versions are chosen based on the SSL initiation configuration. Also, SSL profile needs to be configured in each logical system separately.

    If SSL profile name is not configured in SSL initiation profile configuration, then the following message is displayed Referenced SSL initiation profile is not defined.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 10.2.

footer-navigation