Configuring Application Fingerprinting AFP Overview
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 30-8
The “app-regex.txt” file contains a sample configuration to use as a guide for defining AFP application
signatures and groups (see “AFP Defaults” on page 30-2).
Application Fingerprinting Database
When a match occurs between an IP traffic flow and a REGEX application signature, the following multi-
tuple classifier is generated and stored in a local switch database to identify and track the application
associated with the flow:
• Ingress Port
• Dest MAC
• Src MAC
• VLAN
• Dest IP
• Src IP
• Dest Port
• Src Port
Each database entry is subject to a 15 minute aging period. If the database fills up, older entries are aged
out before the 15 minute limit (fast aging). However, fast aging is not applied to database entries
associated with QoS. In this case, the QoS is removed after the regular 15 minute aging time period
expires. When a database entry is removed due to regular aging or fast aging conditions, any
corresponding QoS is also removed for that flow.
In addition, a packet counter for each application on the ingress Application Fingerprinting port is kept for
statistics generation. The database classification entries and statistics are displayed using Application
Fingerprinting show commands (see “Verifying the AFP Configuration” on page 30-18).
To Next Page
Loading...
