Top conversation report

This support forum board is for support questions relating to Nagios Network Analyzer, our network traffic and bandwidth analysis solution.
User avatar
snapon_admin
Posts: 952
Joined: Mon Jun 10, 2013 10:39 am
Location: Kenosha, WI

Top conversation report

Post by snapon_admin »

Would it be possible to have a conversation (source AND destination) option added to the reports? It's incredibly useful to see who the top traffic producers are on both ends of the conversation in one report, rather than having to run 2 reports to get this info. As a matter of fact, there are a lot of sort of "on the fly" options that would be useful for running reports. Not sure how many of these are possible, but I would like to be able to submit a report and have a set of drop down menus with various options, rather than having to pre-configure report options and then select a specific report from a list of saved reports. The custom report option does this very well, but it's lacking in some options, imo. I've put together a mock up of what I'd like to see from Network analyzer. I know it's asking for a lot of features all at once, but I think this would really make NNA THE go-to netflow analyzer if these were added to the reporting functionality. Please excuse the crudity of my MSPaint skills here, but this is a basic look of some of the options that would be incredibly useful for reporting:
netflow report new.png
Breakdown of requested options:
Custom Report enhancments
* First 2 columns (top X and from <time period>) are fine as they are
* Add grouping by column which includes various options
Conversations: IP address source and Destination. Could be pie graph or trend graph
Applications: Groups traffic using known application ports. Uncommon ports would just show the port number
Class of Service: Break out of traffic by the CoS profiles on the source
Protocols: Group traffic by network protocol
* Add scale column that would allow the graphs to be scaled using
Kbytes
Bytes
Gbytes
Kbps
Mbps
Gbps
Flows
Packets
* Add granularity column to drill down into traffic flow or view over an expanded granularity (a time period of 30 days with a granularity of 5 minutes gets pretty....busy)
* Allow the order of top IPs to be sorted by any of the options in the "Scale" column
* Display DNS names for reports (this wasn't in my original OP and I've already requested this, just throwing it in here for visibility)
* Add custom report option (with the same options as found in NNA) to Nagios XI's NA tab and Network Reports section


EDIT: Clarification/formatting
You do not have the required permissions to view the files attached to this post.
Last edited by snapon_admin on Thu Aug 21, 2014 4:01 pm, edited 1 time in total.
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: Top conversation report

Post by abrist »

I will try to pass this on to the devs. It would be very helpful if you could format your request in such a way that the different portions are separated out into line-items. If you can do this, it will help your request.
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
User avatar
snapon_admin
Posts: 952
Joined: Mon Jun 10, 2013 10:39 am
Location: Kenosha, WI

Re: Top conversation report

Post by snapon_admin »

I edited my OP, is that a better format? Also, I'm available to communicate directly with the devs on this or provide example screenshots using our current netflow analyzer (the one NNA is replacing) if needed. Would definitely love to see these features added, so I'll help out wherever I can. Thanks!
sreinhardt
-fno-stack-protector
Posts: 4366
Joined: Mon Nov 19, 2012 12:10 pm

Re: Top conversation report

Post by sreinhardt »

Thanks Charles, we'll keep that in mind if they have any questions. Going to lock this for the moment, if you need it opened back up let me know!
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.