Telemetry and Logging
Telemetry exposes what the simulated network is doing. netverdict includes syslog-style event dispatch, SNMP/trap surfaces, NetFlow-style flow tracking, and SIEM/SPL helper surfaces for analysis scenarios.
Support level
Section titled “Support level”| Area | Level | Notes |
|---|---|---|
| Syslog | Behaviour model | Event log plus UDP/514 dispatch path. |
| SNMP | Behaviour model | Community config and trap dispatch. |
| NetFlow | Config / behaviour model | Flow-tracking surface for supported scenarios. |
| SIEM / SPL | Config model | Search/helper surface for security analysis labs. |
| Full exporters | Not modelled | No byte-perfect collector protocol implementation. |
Standards coverage
Section titled “Standards coverage”| Standard | Coverage | Notes |
|---|---|---|
| RFC 5424 | Partial | Syslog-style event semantics. |
| SNMPv2c | Partial | Community/trap concepts. |
| NetFlow v5/v9/IPFIX | Minimal | Flow concept, not full exporter packet format. |
Feature matrix
Section titled “Feature matrix”| Feature | Status | Notes |
|---|---|---|
| Local event log | Supported | Runtime events are stored for inspection. |
| Remote syslog host | Supported | Dispatch path represented. |
| SNMP community | Supported | Access config surface. |
| SNMP metadata | Supported | Location and contact fields are stored/emitted where vendor surface exists. |
| SNMP traps | Behaviour model | Trap buffer / dispatch. |
| NetFlow monitor/exporter | Partial | Config and flow surfaces. |
| SPL helper | Config model | Analysis helper, not a protocol runtime. |
Vendor command matrix
Section titled “Vendor command matrix”| Command | IOS-style | Junos-style | VyOS-style | Notes |
|---|---|---|---|---|
logging host 192.0.2.50 | Supported | Partial | Partial | Remote syslog. |
logging trap warnings | Supported | Partial | Partial | Severity filter. |
snmp-server community public RO | Supported | Partial | Partial | SNMP community. |
snmp-server host 192.0.2.50 traps | Supported | Partial | Partial | Trap receiver. |
set snmp location Lab One | n/a | Supported | n/a | Junos commit sets SNMP location. |
set snmp contact noc@example.test | n/a | Supported | n/a | Junos commit sets SNMP contact. |
set snmp community LAB authorization read-only | n/a | Supported | n/a | Junos read-only community. |
set snmp trap-group LAB targets 10.0.0.254 | n/a | Supported | n/a | Junos trap target. |
set system syslog host 10.0.0.20 any info | n/a | Supported | n/a | Junos syslog host. |
ip flow monitor FLOW input | Partial | n/a | Partial | NetFlow attachment. |
show logging | Supported | Partial | Partial | Event log. |
Behaviour notes
Section titled “Behaviour notes”Telemetry is generated from simulator events. It is valuable for debugging and security labs because it ties messages to deterministic state transitions.
Examples
Section titled “Examples”Canonical example
configure terminallogging host 192.0.2.50logging trap warningssnmp-server community public ROsnmp-server host 192.0.2.50 trapsendshow loggingVendor styles
IOS-style
logging host 192.0.2.50logging trap warningssnmp-server community public ROsnmp-server host 192.0.2.50 trapsJunos-style
set system syslog host 192.0.2.50 any warningset snmp community public authorization read-onlyset snmp trap-group NMS targets 192.0.2.50VyOS-style
set system syslog host 192.0.2.50 facility all level warningset service snmp community public authorization roset service snmp trap-target 192.0.2.50Known limits
Section titled “Known limits”Full MIB support, SNMP walks/sets, IPFIX templates, collector behaviour, log format parity, and SIEM product emulation are not supported.