Metrics: Network tab

The Metrics: Network tab contains a number of widgets that display various statistics about network traffic that has been observed and processed by the system.

The data displayed in each individual widget can be reloaded by clicking the reload button at the top right corner of the widget. View the widget data in XML/JSON format by clicking the code (source) button. A brief overview of each widget is displayed in a pop-up when you click the help icon.

Use appliance selector widget to select appliances to monitor. Initially no appliances are selected. Click the Appliance: None Selected server link and select one or more appliances from the pop-up. You can also set a Time range and the Time zone.

Appliances

The Appliances widget displays a legend of the selected appliances with each appliance assigned a unique color. The color is used in the other widgets to indicate the metrics of the applicable appliance. You can hide/show the metrics for a specific appliance by clicking its legend entry.

Traffic processed

The Traffic processed widget provides an overview of the network traffic that has been processed by the Sensor(s). The Sensor periodically reports statistics about the monitored traffic. Its default is normally 10 minutes. To keep the display manageable, the granularity of reported data varies dependent on the current time interval. These data are aggregated in this widget. The x-axis depicts the time and the y-axis the monitored traffic in megabits per second (Mbps). The legend marks each Sensor with a different color.

Packets processed

The Packets processed widget provides an overview of the packets that have been processed by the sensor(s). The x-axis depicts the time and the y-axis the traffic in packets per second.

Downloaded files

The Downloaded files widget displays the number of files that were downloaded in the monitored network.

Concurrent flows

The Concurrent flows widget displays the maximum concurrent flows seen on the network. The x-axis depicts the time and the y-axis the observed flows.

Application layer protocols

The Application layer protocols widget displays the captured traffic (in bits per second) associated with each protocol. When you hover your mouse over the graph, a pop-up is displayed giving more details about the amount of traffic for each protocol.

The displayed protocols are:

  • DCE/RPC — Distributed Computing Environment / Remote Procedure Calls

  • FTP — File Transfer Protocol

  • HTTP — Hypertext Transfer Protocol (includes secure HTTPS traffic)

  • SMB — Server Message Block

  • SMTP — Simple Mail Transfer Protocol

  • SSH — Secure Shell

  • TLS — Transport Layer Security

  • Other — Other protocols

Transport layer protocols

The Transport layer protocols widget displays the amount of data (in bytes) captured for each protocol, TCP or UDP.