IP module: Difference between revisions

Jump to navigation Jump to search

IP module (view source)

Revision as of 13:53, 4 May 2020

2,302 bytes added ,  4 May 2020
no edit summary
No edit summary
No edit summary
Line 39: Line 39:
:These both numbers describe the current throughput of this IP address.
:These both numbers describe the current throughput of this IP address.


* MTU
: The maximum transmission unit (i.e. layer 2 payload) is calculated for both receive and send direction. The maximum values are displayed.


* TCP packets and UDP packets
* TCP packets and UDP packets
Line 49: Line 51:


* Graph
* Graph
:The graph column shows the history graph of the traffic for each IP address. It shows the timestamp on the x-axis and the bytes on the y-axis. The resolution can be changed by using the control buttons on the top of the web page.
:The graph column shows the history graph of the traffic for each IP address. It shows the timestamp on the x-axis and the bytes on the y-axis. The resolution can be changed by using the control buttons on the top of the web page. The graph icon allows for selecting different graph types such as load (bps or packets/s), TCP statistics or connections.




Line 87: Line 89:
Examples are 10.1.2.3/8 for a class A subnet, or 192.168.1.0/24 or class C subnet.
Examples are 10.1.2.3/8 for a class A subnet, or 192.168.1.0/24 or class C subnet.
Multiple subnets per group are possible.
Multiple subnets per group are possible.
It is possible to enable burst analysis for an IP group. The Rx and Tx speed values for 100% utilization can be configured.


To apply the configuration press on the '''Save''' button. The changes take effect immediately.
To apply the configuration press on the '''Save''' button. The changes take effect immediately.
Line 105: Line 109:
For details, see the section '''Per IP statistics''' below.  
For details, see the section '''Per IP statistics''' below.  
In addition to the IP details view, there is also a tab'''List of IPs''' which shows the traffic statistics for the IP addresses of this group.
In addition to the IP details view, there is also a tab'''List of IPs''' which shows the traffic statistics for the IP addresses of this group.
By clicking on the small graph icon in the heading and next to a graph, a dialog will be displayed which allows for selecting the visible graph.
Capturing traffic for a group will capture the network traffic of all IP addresses within this group.
Capturing traffic for a group will capture the network traffic of all IP addresses within this group.


Line 180: Line 187:
The list of peers can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.
The list of peers can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.


'''Layer 4 endpoints'''
The layer 4 endpoint tab shows all peers of the current IP address and the used server port. If the peer is the server, the port of the peer is shown. If the peer is the client, the other port is shown.
The table shows IP addresses with port number, whether the peer acts as a server or client, alternative names, layer 4 protocol and byte and packet counters. If there were multiple connection between the IP address and the peer with the same port, the counters will show aggregated data.


When clicking on "Peer connections" the connection tab is opened with the filter set to match that particular endpoint.


'''Connections tab'''
'''Connections tab'''
Line 186: Line 199:
*The connection tabs lists all connections which involves the current IP. The button rows allow to select which kind of information should be shown.  
*The connection tabs lists all connections which involves the current IP. The button rows allow to select which kind of information should be shown.  
*The table lists the client and server side and shows the IP address, port, and corresponding country of that IP.
*The table lists the client and server side and shows the IP address, port, and corresponding country of that IP.
*The maximum transmission unit (i.e. layer 2 payload) is calculated for both directions. The maximum values of the connection are displayed in the '''MTU''' column.
*The layer 4 protocol is the protocol of the layer 4 protocol used (TCP, UDP, or others).
*The layer 4 protocol is the protocol of the layer 4 protocol used (TCP, UDP, or others).
*The start time is the time of the first packet for that connection, while the last activity column shows the time of the last packet seen so far for the connection. It is possible to sort for both fields to see the most recent active connections.
*The start time is the time of the first packet for that connection, while the last activity column shows the time of the last packet seen so far for the connection. It is possible to sort for both fields to see the most recent active connections.
Line 209: Line 223:
*The columns VLANs and Interfaces shows which VLAN tags has been seen for a specific connection and at which interface the connection has been established.
*The columns VLANs and Interfaces shows which VLAN tags has been seen for a specific connection and at which interface the connection has been established.
*This is especially helpful in bridge mode to determine at which side of link the connection has been established.
*This is especially helpful in bridge mode to determine at which side of link the connection has been established.
* The column PPPoE shows the PPPoE session ID which has been seen for packets of that specific connection. If a PPPoE session ID changes at any time while the connection is active, a 'changed' indication is given. In this case the latter session ID is displayed.
*The column MPLS shows all seen MPLS labels for every direction of the connection. The full label stack is shown.
*The column MPLS shows all seen MPLS labels for every direction of the connection. The full label stack is shown.
*A '''no label''' indication is given, if no MPLS labels have been used. If a MPLS label changes at any time while the connection is active, a '''changed''' indication is given.  
*A '''no label''' indication is given, if no MPLS labels have been used. If a MPLS label changes at any time while the connection is active, a '''changed''' indication is given.  
*In this case the latter MPLS labels are displayed.
*In this case the latter MPLS labels are displayed.
*The column QoS shows all seen QoS service classes for every direction of the connection.  
*The column QoS shows all seen QoS service classes for every direction of the connection. IP DSCP, outermost MPLS traffic classes and outermost VLAN priority code points may be detected and displayed.  If a QoS class changes at any time while the connection is active, a '''changed''' indication is given.   In this case the latter QoS service classes are displayed. TCP RST packets will be ignored, as that packet may be less important and is indicated by a QoS class with lower priority than the previous packets with data.
*IP DSCP, outermost MPLS traffic classes and outermost VLAN priority code points may be detected and displayed.  If a QoS class changes at any time while the connection is active, a '''changed''' indication is given.
*In this case the latter QoS service classes are displayed.
*The column Graph shows the historical throughput for each connection.
*The column Graph shows the historical throughput for each connection.
*A PCAP button allows for capturing the specific connection.
*A PCAP button allows for capturing the specific connection.
*The list of connections can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.
*The list of connections can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.
==== CSV download ====
The connection list can also be downloaded as a CSV document by clicking at the CSV download button. The current filter and sort order is used when creating the CSV file.
The CSV file can also be accessed without using the web interface by getting the following URL:
<code>
/API/stats/modules/ip/ips/x.x.x.x/connections?csv=true
</code>
x.x.x.x must be replaced with the actual IP address. Additional URL parameters can be used to choose a time span, appling filters, etc. See :doc:`api_description` for details.




Ralf
547

edits

Retrieved from "https://allegro-packets.com/wiki/Special:MobileDiff/2542"

Navigation menu