Advanced traffic reporting
The Reports > Traffic page Advanced tab includes a Report Criteria section for specifying traffic criteria for the report and a Traffic Report section for displaying the report.
Report Criteria section
The Traffic Criteria section provides the following options for specifying traffic criteria, layout and time frame for the report. In the traffic criteria section you can enter values manually or click the Browse link to look up values.
-
Cloud – Specifies if the report is to include traffic on the physical network only, the cloud network only, or both.
-
Cloud/VXLAN – Specifies if the report is to include the virtual network only or the physical and cloud network as well. Also limits the report to a specified virtual network.
-
Hosts – Enter a comma-separated list to limit the report to specified hosts, subnets of hosts, or host groups.
-
Interfaces – Limits the report based on interfaces.
-
-
Interfaces – Limits the report to flows that are associated or not associated with a specified flow-collecting device or interface.
-
Interfaces in Network Path – Enter a comma-separated list to limit the report to traffic flows that have traversed a specified interface somewhere in their path through the network.
-
-
BGP AS – Limits the report to traffic flows that have or have not traversed specified BGP (Border Gateway Protocol) AS (Autonomous System) topologies in the monitored network. Limits the report to traffic flows that have or have not occurred within a specified BGP Autonomous System segment.
-
Quality of Service
-
-
DSCP Marking – Enter a comma-separated list of DSCP markings to limit the report to traffic flows that are marked for specified levels of service on the reporting interfaces you have specified. more
-
SteelHead QoS Shaping – Enter a comma-separated list of paths to SteelHead QoS Shaping Policies to limit the report to traffic flows that are marked for specified levels of service on the reporting interfaces you have specified.
-
-
Applications/Ports – Enter a comma-separated list to limit the report to specified applications or ports being used on networks monitored by one or more Sensors.
-
Network Segment – Enter the transmitting interface and receiving interface defining a network segment to limit the report to information about a particular segment of the network.
-
Traffic Expression – Enter keywords, values, and operators to limit the report to traffic specified by a traffic expression.
The traffic report limited to traffic flows that match all the criteria. Leaving a criteria option blank implies "Any." That is, a blank field does not limit the subject of a report.
When using the Traffic Expression option in combination with one or more other criteria options, ensure that you do not enter conflicting criteria.
In addition to the Traffic Criteria section, the Advanced tab includes:
-
Templates – a menu of options for using the current Report Criteria settings; more
-
Report by – specifies the category of data by which traffic is reported (hosts, interfaces, applications, ports, etc.); more
-
Report Format – specifies the graphical presentation to be used for reporting traffic information
-
Historical detail – specifies that the report is based on data in the historical logs for a length of time (ending now) or for an interval of time (from x to y) that the report is to cover
-
Security Profile – specifies that the report is based on a profile of typical behavior for a specified security profile. This option is not available when the security module is not enabled.
-
Data resolution – the period of time represented by each data point on the report; more
-
Run now – runs the report and displays the results as soon as they are available
-
Run in background – opens a window for you to specify the title of the report and the option for saving the report. It then runs the report in the background. When the report is ready, it is saved and listed on the Reports > Saved Reports page.
Traffic Report section
Traffic reports contain multiple sections, depending on the Report by and Report Format settings in the Report Criteria section. The report has a Report Options menu at the top for options that act on the entire report, such as saving, printing, emailing or changing display units. more
There are also controls in each section of each report, which apply to only the individual section. These provide for editing graphing options, changing table columns, changing the number of rows in a table, and exporting data from tables and charts into a Comma-Separated-Value (CSV) files. more
Notes on total traffic displays
Notes on topology columns in Flow List table