Hello. Nowadays I 'm testing nagiosna in my network. I have question regarding report graph.
Four kinds of graph are shown after excuting report. As far as I search each meaning of graph, it shows this meaning.
========================================================================================================================
The "Pie Chart" shows the top 5 talkers by source IP for the last 24 hours.
The "srcip <=> dstip" would show the network traffic from any source IP to any destination IP.
The "srcip <=> srcport" would show the network traffic from any source IP AND any source port to any destination port or IP.
The "srcip <=> dstport" would show the network traffic from any source IP to any destination port.
========================================================================================================================
When I check table data(Flow%, Packets, Bytes, ETC), graph looks weird. I couldn't find the reason attached graph looks like this. One or Two IP Address
occupies most area even though threre's no big difference according to table data. Could you explain me more detail please?
srcip <=> dstip - 172.30.215.50 has biggest area.
srcip <=> srcport - 172.30.215.55 has biggest area, 172.30.215.85 has second one.
srcip <=> dstport - 172.30.215.85 has biggest area, 172.30.215.55 has second, 172.30.213.61 has third.
graph Meaning
-
- Posts: 4
- Joined: Sun Apr 05, 2015 7:58 pm
graph Meaning
You do not have the required permissions to view the files attached to this post.
-
- Former Nagios Staff
- Posts: 13589
- Joined: Mon May 23, 2011 12:15 pm
Re: graph Meaning
The graphs just give you a general overview. In order to understand what is the graphs' meaning, you will need to "drill down".
For example, you can click on the source IP (172.30.215.50) to check the amount of traffic to one or more destination IPs. How is this compared to other source IPs. Do they "talk" mainly to one destination IP or multiple IPs?
Other words, without drilling down to "top talkers", it is very difficult to say what these graphs mean.
For example, you can click on the source IP (172.30.215.50) to check the amount of traffic to one or more destination IPs. How is this compared to other source IPs. Do they "talk" mainly to one destination IP or multiple IPs?
Other words, without drilling down to "top talkers", it is very difficult to say what these graphs mean.
Be sure to check out our Knowledgebase for helpful articles and solutions!