2.2.6. Capture and monitoring interfaces: aggregation

2.2.6.1. Aggregation principle ("cluster")

For more information, refer to Capture and monitoring interfaces between TAP and GCap.


2.2.6.2. CLI commands

Displaying the current aggregation is achieved with the show clusters command.

Configuring the aggregation is done with the set clusters command.


2.2.6.3. Use case procedures

For implementation, refer to the Procedure for managing capture interface aggregation.


2.2.6.4. Aggregation configuration

Aggregation creation is done via the GCap Command Prompt (CLI).

An aggregation, once created, must be activated.


2.2.6.5. Impact on other functionalities

The aggregation functionality of the capture interfaces on the GCap leads to a degradation of some related functions:

  • Maximum Transmission Unit (MTU): the maximum size of a packet that can be transmitted at one time without fragmentation. The MTU uses the largest value of the interfaces making up the aggregation.

  • Static rules for filtering flows captured by monitoring interface: XDP (eXpress Data Path) filter function. XDP Filter: XDP filtering is not applied by default to the aggregation created but rather to the interfaces that comprise it.

  • File rebuilding rules. Rebuild rule: When enabling interface aggregation and multi-tenant detection, file rebuild rules are not generated.