Viewing a VPC Flow Log

Scenarios

Procedure

1. Log in to the management console.

2. Click in the upper left corner and choose Network > Virtual Private Cloud.

   The Virtual Private Cloud page is displayed.

3. In the navigation pane on the left, choose VPC Flow Logs.

   The VPC Flow Logs page is displayed.

4. Locate the target flow log and click View Log Record in the Operation column.

   The Log Management page is displayed.

5. In the log group list, locate the target log group and click the name of the target log stream under it.

   The log stream details page is displayed.

6. Enter key information in the search box to quickly find the flow log to be viewed.

   The flow log record is in the following format:

   <version> <project-id> <interface-id> <srcaddr> <dstaddr> <srcport> <dstport> <protocol> <packets> <bytes> <start> <end> <action> <log-status>
   
   

   Table 1 provides you with flow log examples.

   Table 1 Flow log examples

   Scenario	Example Value
   A flow log record in which data was recorded during the capture window	Value 1 indicates the VPC flow log version. Traffic with a size of 96 bytes to the network interface (1d515d18-1b36-47dc-a983-bd6512aed4bd) during the past 10 minutes (from 16:55:36 to 17:05:36 on January 29, 2019) was allowed. A data packet was transmitted over the UDP protocol from source IP address 192.168.0.154 and port 38929 to destination IP address 192.168.3.25 and port 53. 1 5f67944957444bd6bb4fe3b367de8f3d 1d515d18-1b36-47dc-a983-bd6512aed4bd 192.168.0.154 192.168.3.25 38929 53 17 1 96 1548752136 1548752736 ACCEPT OK
   A flow log record in which no data was recorded during the capture window	1 5f67944957444bd6bb4fe3b367de8f3d 1d515d18-1b36-47dc-a983-bd6512aed4bd - - - - - - - 1431280876 1431280934 - NODATA
   A flow log record in which data was skipped during the capture window	1 5f67944957444bd6bb4fe3b367de8f3d 1d515d18-1b36-47dc-a983-bd6512aed4bd - - - - - - - 1431280876 1431280934 - SKIPDATA