Page 1 of 1
Display protocols in the result of a query
Posted: Fri Feb 07, 2020 8:36 am
by alopera
Is possible execute a query as "dst ip 192.168.1.2 and proto tcp" but.....
If I execute a query as "dst ip 192.168.1.2" I want know the protocol in the output of the NNA.
The output only show:
Flow start
Flow End
Duration
Source Hostname
Destination Hostname
Source Port
Destination Port
Packets
Bytes
Flows
Bits/Sec
Packets/Sec
Bytes/Packet
But I want see the PROTOCOL!!!!
Is possible?
Re: Display protocols in the result of a query
Posted: Fri Feb 07, 2020 10:09 am
by tgriep
Yes, it is possible.
When you use "proto tcp" for the query you are viewing all of the TCP protocol packets.
When you omit it, it will show you all if the traffic but there is not a way to filter or sort by protocol in a query.
Re: Display protocols in the result of a query
Posted: Sat Feb 08, 2020 3:32 am
by alopera
so... is not possible!
In the top talkers I want see the procotol of the flows.
Re: Display protocols in the result of a query
Posted: Sat Feb 08, 2020 4:04 am
by alopera
Re: Display protocols in the result of a query
Posted: Mon Feb 10, 2020 10:18 am
by tgriep
In the Top 5 Section of a source, it does not display the protocol, just the source and destination ports.
Re: Display protocols in the result of a query
Posted: Mon Feb 10, 2020 11:56 am
by alopera
I think it is important that the protocol be visualized in NNA
Re: Display protocols in the result of a query
Posted: Mon Feb 10, 2020 12:26 pm
by tgriep
I agree. In the next major release of XI, it should have a lot more features and functionality added to it.
