Packet truncation, also called packet slicing, involves discarding bytes from a packet. It removes the payload and provides only the necessary metadata for analysis, and thereby reducing the disk storage requirement at the tool farms.
Port-channel by default provides symmetric hashing for IPv4 and IPv6 traffic, making the source-destination pair redirected to the same tool-connected port(s).
The following image shows a visual representation of truncation and load balancing:
Configuration:
1. Configure Network/Tool port(s)
//Network ports
configure terminal
interface ethernet Ethernet12
forward-error-correction rs
type network
end
//Tool ports
configure terminal
interface ethernet Ethernet64/72
forward-error-correction rs
type tool
end
2. Configure packet truncation
configure terminal
interface ethernet Ethernet12
truncate 64
end
3. Configure port-channel with Tool port(s)
configure terminal
port-channel 10 ports Ethernet64,Ethernet72
end
// verify port-channel status
pbnoscli# show port-channel information
===================================
Name : port-channel10
Member ports : Ethernet64/1[up] Ethernet63/1[up]
===================================
pbnoscli#
// verify flow
pbnoscli# show flow summary
Flow-Name Rule-Id Status Counter-Value
=========================================================
flow2 2 Active 50414924
flow2 1 Active 50410923
pbnoscli#
