graph Meaning

This support forum board is for support questions relating to Nagios Network Analyzer, our network traffic and bandwidth analysis solution.
bitflip
Posts: 4
Joined: Sun Apr 05, 2015 7:58 pm

graph Meaning

Post by bitflip »

Hello. Nowadays I 'm testing nagiosna in my network. I have question regarding report graph.
Four kinds of graph are shown after excuting report. As far as I search each meaning of graph, it shows this meaning.
========================================================================================================================
The "Pie Chart" shows the top 5 talkers by source IP for the last 24 hours.
The "srcip <=> dstip" would show the network traffic from any source IP to any destination IP.
The "srcip <=> srcport" would show the network traffic from any source IP AND any source port to any destination port or IP.
The "srcip <=> dstport" would show the network traffic from any source IP to any destination port.
========================================================================================================================

When I check table data(Flow%, Packets, Bytes, ETC), graph looks weird. I couldn't find the reason attached graph looks like this. One or Two IP Address
occupies most area even though threre's no big difference according to table data. Could you explain me more detail please?

srcip <=> dstip - 172.30.215.50 has biggest area.
srcip <=> srcport - 172.30.215.55 has biggest area, 172.30.215.85 has second one.
srcip <=> dstport - 172.30.215.85 has biggest area, 172.30.215.55 has second, 172.30.213.61 has third.
You do not have the required permissions to view the files attached to this post.
User avatar
lmiltchev
Former Nagios Staff
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: graph Meaning

Post by lmiltchev »

The graphs just give you a general overview. In order to understand what is the graphs' meaning, you will need to "drill down".
For example, you can click on the source IP (172.30.215.50) to check the amount of traffic to one or more destination IPs. How is this compared to other source IPs. Do they "talk" mainly to one destination IP or multiple IPs?
Other words, without drilling down to "top talkers", it is very difficult to say what these graphs mean.
Be sure to check out our Knowledgebase for helpful articles and solutions!