NNA and report
-
- Posts: 63
- Joined: Wed Aug 13, 2014 5:39 am
NNA and report
hello please in a report what mean the graph Pie Chart, the graph srcip <=> dstip, the graph srcip <=> srcport and the graph srcip <=> dstport?
-
- Posts: 9117
- Joined: Mon Sep 23, 2013 8:40 am
Re: NNA and report
"srcip" means "Source IP address" and "dstip" means "Destination IP Address". Similarly, "srcport" means "Source Port" and "dstport" means "Destination port".
Former Nagios employee
-
- Posts: 63
- Joined: Wed Aug 13, 2014 5:39 am
Re: NNA and report
Sorry I know that but I want to anderstand what these graphics represent ! How can I interprete these graphics ?
Thanks
Thanks
-
- Former Nagios Staff
- Posts: 13589
- Joined: Mon May 23, 2011 12:15 pm
Re: NNA and report
The "Pie Chart" shows the top 5 talkers by source IP for the last 24 hours. For example, on my Pie Chart I see the following IPs to be at the top (my workstation, our ESXi server, my test Nagios XI box, etc.)
The "srcip <=> dstip" would show the network traffic from any source IP to any destination IP.
The "srcip <=> srcport" would show the network traffic from any source IP AND any source port to any destination port or IP.
The "srcip <=> dstport" would show the network traffic from any source IP to any destination port.
For more information on how to use srcip, dstip, srcport, dstport and how to run custom queries, please read the following document:
http://assets.nagios.com/downloads/nagi ... alyzer.pdf
The "srcip <=> dstip" would show the network traffic from any source IP to any destination IP.
The "srcip <=> srcport" would show the network traffic from any source IP AND any source port to any destination port or IP.
The "srcip <=> dstport" would show the network traffic from any source IP to any destination port.
For more information on how to use srcip, dstip, srcport, dstport and how to run custom queries, please read the following document:
http://assets.nagios.com/downloads/nagi ... alyzer.pdf
Be sure to check out our Knowledgebase for helpful articles and solutions!
-
- Posts: 63
- Joined: Wed Aug 13, 2014 5:39 am
Re: NNA and report
thanks lmiltchev
i have an other question. In a report, why in the protocol case it is write "ANY"? no tcp/udp/icmp or an other procotol is used in the communication between machines?
thanks
i have an other question. In a report, why in the protocol case it is write "ANY"? no tcp/udp/icmp or an other procotol is used in the communication between machines?
thanks
-
- Former Nagios Staff
- Posts: 13589
- Joined: Mon May 23, 2011 12:15 pm
Re: NNA and report
I don't think showing the protocol is implemented yet. You can probably run a custom query to specify the protocol, for example:
Code: Select all
dst ip x.x.x.x and proto tcp
Be sure to check out our Knowledgebase for helpful articles and solutions!
-
- Skynet Drone
- Posts: 2620
- Joined: Wed Feb 11, 2015 1:56 pm
Re: NNA and report
Hi rashid2014,
Did you try creating a custom query to fit your needs and if so did it work? May we close this topic?
Thank you!
Did you try creating a custom query to fit your needs and if so did it work? May we close this topic?
Thank you!