Page 1 of 1
host pair mapping
Posted: Mon May 13, 2019 9:20 am
by biswajit.banerjee
hi
Can any report show me the host pair ( source - destination) mapping with protocol used
Typically need to understand the Traffic via router where it lists all the top destination with attached source host with enformation of data flow and protocols .
Please help us with it
Thanks
Biswajit
Re: host pair mapping
Posted: Mon May 13, 2019 11:58 am
by tgriep
If you want to run a query from the Source view in the NNA GUI, in the Aggregate By field, you would put in the following to view the data by the IP address and the ports.
Then put in the following in the Query field replacing xxx.xxx.xxx.xxx and yyy.yyy.yyy.yyy with valid IP addresses or Host names.
Code: Select all
(src ip xxx.xxx.xxx.xxx and dst ip yyy.yyy.yyy.yyy)
Click in the Run Query button and you can view the data in the GUI.
Or you can create a Query in the Queries menu, use the same data as above and save it for later use.
See this for more details.
http://assets.nagios.com/downloads/nagi ... alyzer.pdf
If you want to see all of the IP address and not specific ones, just leave the Query field empty and that will you to view them all.
Re: host pair mapping
Posted: Mon May 13, 2019 11:29 pm
by biswajit.banerjee
Thanks for the Input . It worked too .
My requirement was little more than that .
I am looking for display of Host pair which are top 20 traffic taker too in last 10 Minutes . Is it possible ?
Please help with the solution .
TIA
Re: host pair mapping
Posted: Tue May 14, 2019 9:07 am
by tgriep
You could create a query like the example from before but use a Custom Elapsed Time of 10 minutes ago, that should get you what you want.
There is not a way to cut off the data at 20 hosts but everything you need would be on the first page or two.
Re: host pair mapping
Posted: Tue May 14, 2019 9:52 pm
by biswajit.banerjee
Ok
Is it possible to sort the displayed data on the basis of host pair which has transferred the top data or packets coming in top line ?
Re: host pair mapping
Posted: Wed May 15, 2019 8:53 am
by tgriep
After the data is displayed, you can click on the header at the top of the data to sort it.
Click on the Bytes label and that will sort it by Bytes for example.
Select any other label to sort by that.
Re: host pair mapping
Posted: Wed May 15, 2019 9:03 am
by biswajit.banerjee
This looks ok for the time being .
Please close the ticket