IP module: Difference between revisions

no edit summary
No edit summary
No edit summary
Line 20: Line 20:
* Alternative names
* Alternative names
:The names are gathered from different data sources. If known, the DNS name is shown first. Secondly, there can be the DHCP name as announced by the system itself. Thirdly, the name of the vendor of the network card of the system using the IP address is shown as well.
:The names are gathered from different data sources. If known, the DNS name is shown first. Secondly, there can be the DHCP name as announced by the system itself. Thirdly, the name of the vendor of the network card of the system using the IP address is shown as well.
These three names allow to easily identify the system behind an IP address.
:These three names allow to easily identify the system behind an IP address.
The name information are also used when filtering the table for some entered string.
The name information are also used when filtering the table for some entered string.


Line 54: Line 54:
* PCAP
* PCAP
:It is possible to download the traffic of an IP address by clicking on the download button. The captured packets are not stored on the system but they are directly sent over the HTTP connection to your computer.
:It is possible to download the traffic of an IP address by clicking on the download button. The captured packets are not stored on the system but they are directly sent over the HTTP connection to your computer.
To stop capture, click on the same button again (which turned to a STOP symbol), or go to the capture traffic page in the generic section and stop the corresponding download.
:To stop capture, click on the same button again (which turned to a STOP symbol), or go to the capture traffic page in the generic section and stop the corresponding download.




Line 138: Line 138:
* the packet and bytes counters, and
* the packet and bytes counters, and
* the current throughput.
* the current throughput.
Additionally, the top DPI protocols are printed both in the table as well as a pie chart at the bottom of the page.
Additionally, the top DPI protocols are printed both in the table as well as a pie chart at the bottom of the page.
The last line in the table shows the MAC addresses seen for this IP address.  
The last line in the table shows the MAC addresses seen for this IP address.  
Line 264: Line 265:
* Response time for SSL handshake
* Response time for SSL handshake


– Number of handshake: This is the total number of SSL requests/responses that have been seen for this IP.
::– Number of handshake: This is the total number of SSL requests/responses that have been seen for this IP.


– Average response time: This is the average response time in milliseconds.
– Average response time: This is the average response time in milliseconds.
Line 278: Line 279:
* Response time for SSL data
* Response time for SSL data


– Number of first data responses: This is the total number of initial SSL data requests/responses that have been seen for this IP.
::– Number of first data responses: This is the total number of initial SSL data requests/responses that have been seen for this IP.


– Average response time: This is the average response time in milliseconds.
– Average response time: This is the average response time in milliseconds.
Line 326: Line 327:
* Store connection information for every IP This option is enabled by default.  
* Store connection information for every IP This option is enabled by default.  
:When enabled, the IP measurement module stores every connection for each IP.  
:When enabled, the IP measurement module stores every connection for each IP.  
This includes historical packet counter so you can see for individual connection at which time the connection transferred which amount of data.  
:This includes historical packet counter so you can see for individual connection at which time the connection transferred which amount of data.  
Connection data will be stored as long as possible regarding the total memory usage.
Connection data will be stored as long as possible regarding the total memory usage.
Disabling this option will increase the minimum storage time significantly.
Disabling this option will increase the minimum storage time significantly.
Line 338: Line 339:
:When This option is enabled, TCP connections per IP will be tracked.  
:When This option is enabled, TCP connections per IP will be tracked.  
:Connections are divided into valid and invalid connections for server and client direction and the amount is shown.
:Connections are divided into valid and invalid connections for server and client direction and the amount is shown.
Disabling this option will increase the minimum storage time slightly.
:Disabling this option will increase the minimum storage time slightly.




* Store traffic history graph for IP peers  
* Store traffic history graph for IP peers  
:This option allows enabling or disabling the traffic history graph that is shown per peer in the “Peers” tab for an IP.
:This option allows enabling or disabling the traffic history graph that is shown per peer in the “Peers” tab for an IP.
Disabling this option will increase the minimum storage time slightly.
:Disabling this option will increase the minimum storage time slightly.




* Enable RTP measurement
* Enable RTP measurement
:This option allows enabling or disabling of RTP related statistics that are shown in the “RTP statistics” tab for an IP.  
:This option allows enabling or disabling of RTP related statistics that are shown in the “RTP statistics” tab for an IP.  
Jitter and MOS calculation in the [[7-_L7_-_Application(Teil_1)#SIP_module|SIP module]] also depends on this switch.
:Jitter and MOS calculation in the [[7-_L7_-_Application(Teil_1)#SIP_module|SIP module]] also depends on this switch.
Disabling this option will increase the minimum storage time slightly.
Disabling this option will increase the minimum storage time slightly.


Line 354: Line 355:
* Store QoS information for every IP
* Store QoS information for every IP
:This option enables or disables to storage of Quality of Service information per IP.  
:This option enables or disables to storage of Quality of Service information per IP.  
These information require additional memory so if these information are not necessary, memory can be save to increase global data storage time.
:These information require additional memory so if these information are not necessary, memory can be save to increase global data storage time.




* Store SSL/TLS information for every connection
* Store SSL/TLS information for every connection
:This option enables or disables to storage of SSL/TLS information per IP. This includes used and announced
:This option enables or disables to storage of SSL/TLS information per IP. This includes used and announced
encryption ciphers which can take additional memory per IP connection. If these information are not necessary, memory can be save to increase global data storage time.
:encryption ciphers which can take additional memory per IP connection. If these information are not necessary, memory can be save to increase global data storage time.




* Maximum number of IP groups
* Maximum number of IP groups
:This option configures how many IP groups can be defined. The minimum (and default) value is 32 IP groups.
:This option configures how many IP groups can be defined. The minimum (and default) value is 32 IP groups.
The maximum value is 65535 IP groups. A new configuration value only takes effect after restarting the packet processing in the Administration menu.
:The maximum value is 65535 IP groups. A new configuration value only takes effect after restarting the packet processing in the Administration menu.
1,775

edits