Reports: Difference between revisions

Jump to navigation Jump to search
no edit summary
No edit summary
No edit summary
Line 82: Line 82:
connections to be used for the report. This setting can be chosen when
connections to be used for the report. This setting can be chosen when
issuing new reports or configuring a scheduled report.
issuing new reports or configuring a scheduled report.


==== Top IP/ports====
==== Top IP/ports====
This component shows the top IP/port pairs grouped by IP address and sorted by
This component shows the top IP/port pairs grouped by IP address and sorted by
traffic in the report time window. It lists the IP address, its port, layer 4
traffic in the report time window. It lists the IP address, its port, layer 4
and layer 7 protocols and received and sent bytes. The traffic sorting is
and layer 7 protocols and received and sent bytes. The traffic sorting is
performed globally.
performed globally.


=====Configuration variables=====
=====Configuration variables=====
Line 96: Line 99:
* Max ports per IP: The number of different ports shown per IP address. Default: unlimited.
* Max ports per IP: The number of different ports shown per IP address. Default: unlimited.
* Sort by: The sorting can be selected in the drop down box. Following sortings are possible.
* Sort by: The sorting can be selected in the drop down box. Following sortings are possible.


–received bytes: sorts the IP/ports list by received bytes for a port in descending order.
–received bytes: sorts the IP/ports list by received bytes for a port in descending order.
Line 102: Line 106:


–received + sent bytes: sorts by all traffic for a port.
–received + sent bytes: sorts by all traffic for a port.


Please note that the IPs are grouped first and the traffic sorting is applied afterwards.
Please note that the IPs are grouped first and the traffic sorting is applied afterwards.
* Filter by IP or subnet: An IP address or subnet can be specified. The traffic accounting will use this filter criteria and will only take connections into account with matching IPs. A drop down box allows selecting on which IPs the filter is applied. The filter is either applied on the IP address that is shown, or the IP address of the peer or on both addresses.
* Filter by IP or subnet: An IP address or subnet can be specified. The traffic accounting will use this filter criteria and will only take connections into account with matching IPs. A drop down box allows selecting on which IPs the filter is applied. The filter is either applied on the IP address that is shown, or the IP address of the peer or on both addresses.


* Select port: The ports of the connection between two IPs can be configured. By default the port is used that belongs to the IP address that is shown in the table (own port). The port of the IP of the peer can be selected in the drop down box. With this setting a source address will be shown with its destination port and vice versa.
* Select port: The ports of the connection between two IPs can be configured. By default the port is used that belongs to the IP address that is shown in the table (own port). The port of the IP of the peer can be selected in the drop down box. With this setting a source address will be shown with its destination port and vice versa.
Consider the following connections as an example:
Consider the following connections as an example:


–12.34.56.78:80 <-> 51.2.3.4:65432  
–12.34.56.78:80 <-> 51.2.3.4:65432  
Line 116: Line 123:


When own port is chosen, the report will show 12.34.56.78:80 with the aggregated traffic counters of all three connections. With this setting the most used  IP/ports in the network are shown.
When own port is chosen, the report will show 12.34.56.78:80 with the aggregated traffic counters of all three connections. With this setting the most used  IP/ports in the network are shown.
When port of peer is chosen, the report will show 12.34.56.78:65432 and 12.24.56.78:63111. The connections will be aggregated if own IP address and port of the peer are the same. With this setting you can find out e.g. the most used client ports for a certain server.
When port of peer is chosen, the report will show 12.34.56.78:65432 and 12.24.56.78:63111.  
The connections will be aggregated if own IP address and port of the peer are the same. With this setting you can find out e.g. the most used client ports for a certain server.




1,775

edits

Navigation menu