Page 1 of 1
NNA and report
Posted: Fri Feb 13, 2015 1:19 pm
by rashid2014
hello please in a report what mean the graph Pie Chart, the graph srcip <=> dstip, the graph srcip <=> srcport and the graph srcip <=> dstport?
Re: NNA and report
Posted: Fri Feb 13, 2015 3:20 pm
by tmcdonald
"srcip" means "Source IP address" and "dstip" means "Destination IP Address". Similarly, "srcport" means "Source Port" and "dstport" means "Destination port".
Re: NNA and report
Posted: Fri Feb 13, 2015 10:52 pm
by rashid2014
Sorry I know that but I want to anderstand what these graphics represent ! How can I interprete these graphics ?
Thanks
Re: NNA and report
Posted: Mon Feb 16, 2015 1:13 pm
by lmiltchev
The "Pie Chart" shows the top 5 talkers by source IP for the last 24 hours. For example, on my Pie Chart I see the following IPs to be at the top (my workstation, our ESXi server, my test Nagios XI box, etc.)
The "srcip <=> dstip" would show the network traffic from any source IP to any destination IP.
The "srcip <=> srcport" would show the network traffic from any source IP AND any source port to any destination port or IP.
The "srcip <=> dstport" would show the network traffic from any source IP to any destination port.
For more information on how to use srcip, dstip, srcport, dstport and how to run custom queries, please read the following document:
http://assets.nagios.com/downloads/nagi ... alyzer.pdf
Re: NNA and report
Posted: Mon Feb 16, 2015 3:00 pm
by rashid2014
thanks lmiltchev
i have an other question. In a report, why in the protocol case it is write "ANY"? no tcp/udp/icmp or an other procotol is used in the communication between machines?
thanks
Re: NNA and report
Posted: Mon Feb 16, 2015 5:52 pm
by lmiltchev
I don't think showing the protocol is implemented yet. You can probably run a custom query to specify the protocol, for example:
Re: NNA and report
Posted: Wed Feb 18, 2015 11:35 am
by rashid2014
Thanks i try now.
Re: NNA and report
Posted: Wed Feb 18, 2015 2:08 pm
by jdalrymple
Hi rashid2014,
Did you try creating a custom query to fit your needs and if so did it work? May we close this topic?
Thank you!