IP module: Difference between revisions

Jump to navigation Jump to search
no edit summary
(Created page with "The IP module operates on layer 3 of the network stack. It stores information about all IPv4 and IPv6 addresses. For every address, the corresponding network traffic is accoun...")
 
No edit summary
Line 19: Line 19:


* Alternative names
* Alternative names
The names are gathered from different data sources. If known, the DNS name is shown first. Secondly, there can be the DHCP name as announced by the system itself. Thirdly, the name of the vendor of the network card of the system using the IP address is shown as well.
:The names are gathered from different data sources. If known, the DNS name is shown first. Secondly, there can be the DHCP name as announced by the system itself. Thirdly, the name of the vendor of the network card of the system using the IP address is shown as well.
These three names allow to easily identify the system behind an IP address.
These three names allow to easily identify the system behind an IP address.
The name information are also used when filtering the table for some entered string.
The name information are also used when filtering the table for some entered string.
Line 25: Line 25:


* First (recent) activity
* First (recent) activity
This column shows the time of first activity of an IP address after some long inactivity period. This columns can be sorted to see the IP addresses that are active in the recent past.
:This column shows the time of first activity of an IP address after some long inactivity period. This columns can be sorted to see the IP addresses that are active in the recent past.




* Last activity
* Last activity
The last activity of an IP is the time of the last packet for that IP.
:The last activity of an IP is the time of the last packet for that IP.




* Packets and Bytes
* Packets and Bytes
This is the number of packets and bytes, sent by the IP address as a blue arrow up, and the received packets and bytes as a yellow arrow down.
:This is the number of packets and bytes, sent by the IP address as a blue arrow up, and the received packets and bytes as a yellow arrow down.




* Packets/s and Bits/s
* Packets/s and Bits/s
These both numbers describe the current throughput of this IP address.
:These both numbers describe the current throughput of this IP address.




* TCP packets and UDP packets
* TCP packets and UDP packets
This is the number of TCP and UDP packets that have been seen for this IP.
:This is the number of TCP and UDP packets that have been seen for this IP.




* TCP payload and retransmissions
* TCP payload and retransmissions
These two columns show the number of bytes transmitted as TCP payload and how many bytes have been retransmitted, indicating a bad connection quality.
:These two columns show the number of bytes transmitted as TCP payload and how many bytes have been retransmitted, indicating a bad connection quality.




* Graph
* Graph
The graph column shows the history graph of the traffic for each IP address. It shows the timestamp on the x-axis and the bytes on the y-axis. The resolution can be changed by using the control buttons on the top of the web page.
:The graph column shows the history graph of the traffic for each IP address. It shows the timestamp on the x-axis and the bytes on the y-axis. The resolution can be changed by using the control buttons on the top of the web page.




* PCAP
* PCAP
It is possible to download the traffic of an IP address by clicking on the download button. The captured packets are not stored on the system but they are directly sent over the HTTP connection to your computer.
:It is possible to download the traffic of an IP address by clicking on the download button. The captured packets are not stored on the system but they are directly sent over the HTTP connection to your computer.
To stop capture, click on the same button again (which turned to a STOP symbol), or go to the capture traffic page in the generic section and stop the corresponding download.
To stop capture, click on the same button again (which turned to a STOP symbol), or go to the capture traffic page in the generic section and stop the corresponding download.


Line 325: Line 325:


* Store connection information for every IP This option is enabled by default.  
* Store connection information for every IP This option is enabled by default.  
When enabled, the IP measurement module stores every connection for each IP.  
:When enabled, the IP measurement module stores every connection for each IP.  
This includes historical packet counter so you can see for individual connection at which time the connection transferred which amount of data.  
This includes historical packet counter so you can see for individual connection at which time the connection transferred which amount of data.  
Connection data will be stored as long as possible regarding the total memory usage.
Connection data will be stored as long as possible regarding the total memory usage.
Line 332: Line 332:


* Store layer 7 protocol information for every IP The network protocols and their historical traffic data is stored for each IP if this option is enabled.
* Store layer 7 protocol information for every IP The network protocols and their historical traffic data is stored for each IP if this option is enabled.
Disabling this option will increase the minimum storage time slightly.
:Disabling this option will increase the minimum storage time slightly.




* Track number of new connections for every IP When
* Track number of new connections for every IP  
This option is enabled, TCP connections per IP will be tracked.  
:When This option is enabled, TCP connections per IP will be tracked.  
Connections are divided into valid and invalid connections for server and client direction and the amount is shown.
:Connections are divided into valid and invalid connections for server and client direction and the amount is shown.
Disabling this option will increase the minimum storage time slightly.
Disabling this option will increase the minimum storage time slightly.




* Store traffic history graph for IP peers  
* Store traffic history graph for IP peers  
This option allows enabling or disabling the traffic history graph that is shown per peer in the “Peers” tab for an IP.
:This option allows enabling or disabling the traffic history graph that is shown per peer in the “Peers” tab for an IP.
Disabling this option will increase the minimum storage time slightly.
Disabling this option will increase the minimum storage time slightly.




* Enable RTP measurement
* Enable RTP measurement
This option allows enabling or disabling of RTP related statistics that are shown in the “RTP statistics” tab for an IP.  
:This option allows enabling or disabling of RTP related statistics that are shown in the “RTP statistics” tab for an IP.  
Jitter and MOS calculation in the [[7-_L7_-_Application(Teil_1)#SIP_module|SIP module]] also depends on this switch.
Jitter and MOS calculation in the [[7-_L7_-_Application(Teil_1)#SIP_module|SIP module]] also depends on this switch.
Disabling this option will increase the minimum storage time slightly.
Disabling this option will increase the minimum storage time slightly.
Line 353: Line 353:


* Store QoS information for every IP
* Store QoS information for every IP
This option enables or disables to storage of Quality of Service information per IP.  
:This option enables or disables to storage of Quality of Service information per IP.  
These information require additional memory so if these information are not necessary, memory can be save to increase global data storage time.
These information require additional memory so if these information are not necessary, memory can be save to increase global data storage time.




* Store SSL/TLS information for every connection
* Store SSL/TLS information for every connection
This option enables or disables to storage of SSL/TLS information per IP. This includes used and announced
:This option enables or disables to storage of SSL/TLS information per IP. This includes used and announced
encryption ciphers which can take additional memory per IP connection. If these information are not nec-
encryption ciphers which can take additional memory per IP connection. If these information are not necessary, memory can be save to increase global data storage time.
essary, memory can be save to increase global data storage time.




* Maximum number of IP groups
* Maximum number of IP groups
This option configures how many IP groups can be defined. The minimum (and default) value is 32 IP groups.
:This option configures how many IP groups can be defined. The minimum (and default) value is 32 IP groups.
The maximum value is 65535 IP groups. A new configuration value only takes effect after restarting the
The maximum value is 65535 IP groups. A new configuration value only takes effect after restarting the packet processing in the Administration menu.
packet processing in the Adminstration menu.
1,775

edits

Navigation menu