port-identification packet-number-threshold

Function

The port-identification packet-number-threshold command sets the threshold of packet quantity for port identification in the SA module.

The undo port-identification packet-number-threshold command restores the default threshold of packet quantity for port identification in the SA module.

Format

port-identification packet-number-threshold packets

undo port-identification packet-number-threshold

Parameters

Parameter	Description	Value
packets	Specifies the number of packets.	The value is an integer ranging from 1 to 64. The default value is 16.

Views

SA view

Default Level

2: Configuration level

Usage Guidelines

If packets exceeding the threshold are sent to the IAE and their applications cannot be identified, the SA module identifies the application by port. A high threshold compromises the application identification performance while a low threshold increases the false positive rate. The default value (16) is recommended.

Example

# Set the threshold of packet quantity for port identification in the SA module to 32.

<sysname> system-view
[sysname] sa
[sysname-sa] port-identification packet-number-threshold 32