
VMware, Inc. 75
Chapter 6 vShield App Management
Queryparametersaredescribedinthetablebelow.
Get Flow Meta-Data
Youcanretrievethefollowinginformationforeachflowtype:
minimumstatstime
maximumendtime
Table 6-1. Query parameters for retrieving flow statistics call
Parameter Description
flowStats Typeoftheflowtoberetrieved.PossiblevaluesareTCP_UDP,LAYER2,and
LAYER3
contextId vc‐moref‐idofthedatacenter,portgroup,virtualmachine,orUUIDofthevNICfor
whichtrafficflowistoberetrieved.
startTime Flowswithstarttimegreaterthanthespecifiedtimearetoberetrieved.
endTime
Flowswithstarttimelowerthanthespecifiedtimearetoberetrieved.
startIndex
Optionalparameterthatspecifiesthestartingpointforretrievingtheflows.Ifthisparameteris
notspecified,flowsareretrievedfromthebeginning.
pageSize OptionalparameterthatlimitsthemaximumnumberofentriesreturnedbytheAPI.Thedefault
valueforthisparameteris256andthevalidrangeis1‐1024.
Table 6-2. Response values for retrieving flow statistics call
Value Description
startTime Starttimeforcurrentflow.
endTime Endtimeforcurrentflow.
ruleId ruleIdforcurrentflow.
blocked Indicateswhethertrafficisblocked–0:Flowallowed,1:Flowblocked,2:Flow
blockedbySpoofguard.
protocol protocolinflow–0:TCP,1:UDP, 2:ICMP.
direction Directionofflow–0:Tovirtualmachine,1:Fromvirtualmachine.
sessions Numberofsessionsincurrentflow.
sourcePackets Countof
PacketsfromSourcetoDestinationincurrentflow.
destinationPackets CountofPacketsfromDestinationtoSourceincurrentflow.
sourceBytes CountofBytestransferredfromSourcetoDestinationincurrentflow.
destinationBytes CountofBytestransferredfromDestinationtoSourceincurrentflow.
sourceIp SourceIPofcurrentflow.
destinationIp DestinationIPofcurrentflow.
sourceMac SourceMacofcurrent
flow.
destinationMac DestinationMacofcurrentflow.
subtype Identifiesthesubtypeofcurrentflow.
destinationPort PortnumberofDestinationforTCP/UDPtraffic.
controlProtocol ControlprotocolfordynamicTCPtraffic.
controlSourceIp ControlsourceIPfordynamicTCPtraffic.
controlDestinationIp ControldestinationIPfordynamicTCPtraffic.
controlDestinationPort ControldestinationportfordynamicTCPtraffic.
controlDirection ControldirectionfordynamicTCPtraffic–
0:Source‐>Destination,
1:Destination‐>Source.
Comentários a estes Manuais