Page 1 of 1

Graph Meaning

Posted: Wed Jun 17, 2015 1:21 am
by bitflip
Hello. Nowadays I 'm testing nagiosna in my network. I have question regarding report graph.
Four kinds of graph are shown after excuting report. As far as I search each meaning of graph, it shows this meaning.
========================================================================================================================
The "Pie Chart" shows the top 5 talkers by source IP for the last 24 hours.
The "srcip <=> dstip" would show the network traffic from any source IP to any destination IP.
The "srcip <=> srcport" would show the network traffic from any source IP AND any source port to any destination port or IP.
The "srcip <=> dstport" would show the network traffic from any source IP to any destination port.
========================================================================================================================

When I check table data(Flow%, Packets, Bytes, ETC), Graph looks weird. I couldn't find the reason attached graph looks like this. One or Two IP Address
occupies most area even though threre's no big difference according to table data. Could you explain me more detail please?

srcip <=> dstip - 172.30.215.50 has biggest area.
srcip <=> srcport - 172.30.215.55 has biggest area, 172.30.215.85 has second one.
srcip <=> dstport - 172.30.215.85 has biggest area, 172.30.215.55 has second, 172.30.213.61 has third.

Re: Graph Meaning

Posted: Wed Jun 17, 2015 2:15 pm
by lmiltchev
The graphs just give you a general overview. In order to understand what is the graphs' meaning, you will need to "drill down".
For example, you can click on the source IP (172.30.215.50) to check the amount of traffic to one or more destination IPs. How is this compared to other source IPs. Do they "talk" mainly to one destination IP or multiple IPs?
Other words, without drilling down to "top talkers", it is very difficult to say what these graphs mean.