IP module: Difference between revisions

no edit summary
No edit summary
No edit summary
Line 11: Line 11:
|}
|}


'''IP addresses tab'''
=== IP addresses tab ===


The IP addresses tab shows the complete list of all IP addresses seen by the system. The button row allows for select specific information to be shown or hidden so that only the relevant information fit on the screen.  
The IP addresses tab shows the complete list of all IP addresses seen by the system. The button row allows for select specific information to be shown or hidden so that only the relevant information fit on the screen.  
Line 68: Line 68:




'''IP groups tab'''
=== IP groups tab ===


The IP statistics can also be summarized for a group of IP addresses.  
The IP statistics can also be summarized for a group of IP addresses.  
Line 80: Line 80:




'''Configuration'''
==== Configuration ====


To open the configuration dialog, click on the button '''Configure groups'''. The dialog allows to add new groups by clicking on the plus button in the first column.  
To open the configuration dialog, click on the button '''Configure groups'''. The dialog allows to add new groups by clicking on the plus button in the first column.  
Line 102: Line 102:




'''Available statistics'''
==== Available statistics ====


The statistics available for each group are almost identical as for individual IP addresses. The '''IP groups''' tab lists the groups and their traffic just like the '''IP addresses''' tab lists the IP addresses and their traffic.
The statistics available for each group are almost identical as for individual IP addresses. The '''IP groups''' tab lists the groups and their traffic just like the '''IP addresses''' tab lists the IP addresses and their traffic.
Line 115: Line 115:




'''Global IP statistics tab'''
=== Global IP statistics tab ===


The global IP statistics shows global sums about the processed IPv4 and IPv6 traffic and often used layer 4 protocols.
The global IP statistics shows global sums about the processed IPv4 and IPv6 traffic and often used layer 4 protocols.
Line 128: Line 128:




'''Per IP statistics'''
=== Per IP statistics ===


It is possible to select an IP from the list of IP addresses and get an more detailed view of the information stored about that IP.
It is possible to select an IP from the list of IP addresses and get an more detailed view of the information stored about that IP.
Line 139: Line 139:




'''Overview tab'''
==== Overview tab ====


This tab summarizes all the standard information from the main IP view, such as
This tab summarizes all the standard information from the main IP view, such as
Line 160: Line 160:




'''Layer 3 QoS tab'''
==== Layer 3 QoS tab ====


This tab lists all seen IP DSCP values for the current IP.  
This tab lists all seen IP DSCP values for the current IP.  
Line 167: Line 167:




'''Layer 2 QoS tab'''
==== Layer 2 QoS tab ====


This tab lists all seen MPLS traffic classes and VLAN priority code points for the current IP.  
This tab lists all seen MPLS traffic classes and VLAN priority code points for the current IP.  
Line 175: Line 175:




'''Protocols tab'''
==== Protocols tab ====


This tab lists the DPI protocols for the current IP. The download button allows to capture the traffic for the IP and protocol pair.
This tab lists the DPI protocols for the current IP. The download button allows to capture the traffic for the IP and protocol pair.




'''Peers tab'''
==== Peers tab ====


The Peers tab shows all communication peers the current IP address has talked to. The table contains the IP address which can be clicked to see the statistics for that IP.
The Peers tab shows all communication peers the current IP address has talked to. The table contains the IP address which can be clicked to see the statistics for that IP.
Line 187: Line 187:
The list of peers can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.
The list of peers can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.


'''Layer 4 endpoints'''
==== Layer 4 endpoints ====


The layer 4 endpoint tab shows all peers of the current IP address and the used server port. If the peer is the server, the port of the peer is shown. If the peer is the client, the other port is shown.
The layer 4 endpoint tab shows all peers of the current IP address and the used server port. If the peer is the server, the port of the peer is shown. If the peer is the client, the other port is shown.
Line 195: Line 195:
When clicking on "Peer connections" the connection tab is opened with the filter set to match that particular endpoint.
When clicking on "Peer connections" the connection tab is opened with the filter set to match that particular endpoint.


'''Connections tab'''
==== Connections tab ====


*The connection tabs lists all connections which involves the current IP. The button rows allow to select which kind of information should be shown.  
*The connection tabs lists all connections which involves the current IP. The button rows allow to select which kind of information should be shown.  
Line 232: Line 232:
*The list of connections can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.
*The list of connections can be filtered by entering a string into the text area. Also, complex filter expressions are possible, if the string starts with an open parenthesis '''('''. See [[Live_filtering_of_tables|Live filtering of tables]] for details.


==== CSV download ====
===== CSV download =====


The connection list can also be downloaded as a CSV document by clicking at the CSV download button. The current filter and sort order is used when creating the CSV file.
The connection list can also be downloaded as a CSV document by clicking at the CSV download button. The current filter and sort order is used when creating the CSV file.
Line 245: Line 245:




'''Open TCP server ports'''
==== Open TCP server ports ====


This tab shows the list of ports for which the IP address has accessed incoming connections.   
This tab shows the list of ports for which the IP address has accessed incoming connections.   
Line 253: Line 253:




'''TCP statistics'''
==== TCP statistics ====


This web page shows statistics about the response time of TCP connection handshake of all TCP connections of the current IP address.  
This web page shows statistics about the response time of TCP connection handshake of all TCP connections of the current IP address.  
Line 265: Line 265:




'''HTTP server statistics'''
==== HTTP server statistics ====


This tab shows statistics (if available) of all HTTP requests handled by the current IP address.
This tab shows statistics (if available) of all HTTP requests handled by the current IP address.
Line 281: Line 281:




'''SSL server statistics'''
==== SSL server statistics ====


This tab shows statistics (if available) of all SSL requests handled by the current IP address.
This tab shows statistics (if available) of all SSL requests handled by the current IP address.
Line 308: Line 308:




'''SSL/TLS infos'''
==== SSL/TLS infos ====


This tab shows statistics (if available) of all negotiated SSL/TLS versions and cipher suites used by the current IP address either as server or client.
This tab shows statistics (if available) of all negotiated SSL/TLS versions and cipher suites used by the current IP address either as server or client.




'''SIP statistics'''
==== SIP statistics ====


This tab shows statistics (if available) of all SIP request methods, all SIP response types as well as all SIP request/response pairs sent or received by the current IP address.
This tab shows statistics (if available) of all SIP request methods, all SIP response types as well as all SIP request/response pairs sent or received by the current IP address.




'''RTP statistics'''
==== RTP statistics ====


This tab shows statistics (if available) of all RTP connections which involve the current IP address as either client or server.
This tab shows statistics (if available) of all RTP connections which involve the current IP address as either client or server.
547

edits