Skip to content

Telemetry and Logging

Telemetry exposes what the simulated network is doing. netverdict includes syslog-style event dispatch, SNMP/trap surfaces, NetFlow-style flow tracking, and SIEM/SPL helper surfaces for analysis scenarios.

AreaLevelNotes
SyslogBehaviour modelEvent log plus UDP/514 dispatch path.
SNMPBehaviour modelCommunity config and trap dispatch.
NetFlowConfig / behaviour modelFlow-tracking surface for supported scenarios.
SIEM / SPLConfig modelSearch/helper surface for security analysis labs.
Full exportersNot modelledNo byte-perfect collector protocol implementation.
StandardCoverageNotes
RFC 5424PartialSyslog-style event semantics.
SNMPv2cPartialCommunity/trap concepts.
NetFlow v5/v9/IPFIXMinimalFlow concept, not full exporter packet format.
FeatureStatusNotes
Local event logSupportedRuntime events are stored for inspection.
Remote syslog hostSupportedDispatch path represented.
SNMP communitySupportedAccess config surface.
SNMP metadataSupportedLocation and contact fields are stored/emitted where vendor surface exists.
SNMP trapsBehaviour modelTrap buffer / dispatch.
NetFlow monitor/exporterPartialConfig and flow surfaces.
SPL helperConfig modelAnalysis helper, not a protocol runtime.
CommandIOS-styleJunos-styleVyOS-styleNotes
logging host 192.0.2.50SupportedPartialPartialRemote syslog.
logging trap warningsSupportedPartialPartialSeverity filter.
snmp-server community public ROSupportedPartialPartialSNMP community.
snmp-server host 192.0.2.50 trapsSupportedPartialPartialTrap receiver.
set snmp location Lab Onen/aSupportedn/aJunos commit sets SNMP location.
set snmp contact noc@example.testn/aSupportedn/aJunos commit sets SNMP contact.
set snmp community LAB authorization read-onlyn/aSupportedn/aJunos read-only community.
set snmp trap-group LAB targets 10.0.0.254n/aSupportedn/aJunos trap target.
set system syslog host 10.0.0.20 any infon/aSupportedn/aJunos syslog host.
ip flow monitor FLOW inputPartialn/aPartialNetFlow attachment.
show loggingSupportedPartialPartialEvent log.

Telemetry is generated from simulator events. It is valuable for debugging and security labs because it ties messages to deterministic state transitions.

Canonical example
configure terminal
logging host 192.0.2.50
logging trap warnings
snmp-server community public RO
snmp-server host 192.0.2.50 traps
end
show logging

Vendor styles

IOS-style
logging host 192.0.2.50
logging trap warnings
snmp-server community public RO
snmp-server host 192.0.2.50 traps
Junos-style
set system syslog host 192.0.2.50 any warning
set snmp community public authorization read-only
set snmp trap-group NMS targets 192.0.2.50
VyOS-style
set system syslog host 192.0.2.50 facility all level warning
set service snmp community public authorization ro
set service snmp trap-target 192.0.2.50

Full MIB support, SNMP walks/sets, IPFIX templates, collector behaviour, log format parity, and SIEM product emulation are not supported.