host pair mapping

[biswajit.banerjee]

hi
Can any report show me the host pair ( source - destination) mapping with protocol used
Typically need to understand the Traffic via router where it lists all the top destination with attached source host with enformation of data flow and protocols .

Please help us with it

Thanks
Biswajit

[tgriep]

If you want to run a query from the Source view in the NNA GUI, in the Aggregate By field, you would put in the following to view the data by the IP address and the ports.

Code: Select all

srcip,srcport,dstip,dstport

Then put in the following in the Query field replacing xxx.xxx.xxx.xxx and yyy.yyy.yyy.yyy with valid IP addresses or Host names.

Code: Select all

(src ip xxx.xxx.xxx.xxx and dst ip yyy.yyy.yyy.yyy)

Click in the Run Query button and you can view the data in the GUI.

Or you can create a Query in the Queries menu, use the same data as above and save it for later use.

See this for more details.
http://assets.nagios.com/downloads/nagi ... alyzer.pdf

If you want to see all of the IP address and not specific ones, just leave the Query field empty and that will you to view them all.

[biswajit.banerjee]

Thanks for the Input . It worked too .
My requirement was little more than that .
I am looking for display of Host pair which are top 20 traffic taker too in last 10 Minutes . Is it possible ?

Please help with the solution .

TIA

[tgriep]

You could create a query like the example from before but use a Custom Elapsed Time of 10 minutes ago, that should get you what you want.
There is not a way to cut off the data at 20 hosts but everything you need would be on the first page or two.

[biswajit.banerjee]

Ok

Is it possible to sort the displayed data on the basis of host pair which has transferred the top data or packets coming in top line ?

[tgriep]

After the data is displayed, you can click on the header at the top of the data to sort it.
Click on the Bytes label and that will sort it by Bytes for example.
Select any other label to sort by that.

[biswajit.banerjee]

This looks ok for the time being .
Please close the ticket