Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 765 / 1016

Viewing Detailed Network Information
Click on the Show Detail Viewer to access the Detailed Network Information view. This
view displays details for selected IP addresses. enabling you to further investigate the
details of a connection, such as a username for an account on a host, open ports, or RPC
services. You can also right-click on any entry in the Profiler view and select
Show Detail
Viewer to access the Detailed Network Information view for that entry.
Use the IP and MAC areas to select the IP and MAC addresses of each interface on the
selected host. For hosts with multiple interfaces, select the MAC address for the interface
you want to investigate.
Click on any of the tabs in the right-hand window to view different types of information
that your devices have recorded for the selected IP address and MAC address.
Table 88 on page 715 lists and describes the information that you can view using the
Detailed Network Information View:
Table 88: Detailed Network Information Data
Description Column
Details about the selected host IP, including:
• IP Address
• MAC Address
• OUI (Organizationally unique identifier), a mapping of the first three bytes
of the MAC address and the organization that owns the block of MACs
(to obtain a list of OUIs, see
http://standards.ieee.org/regauth/oui/oui.txt
).
•
VLAN tag (if applicable)
• First Seen date and time that the devices first recorded traffic on that
interface
•
Last Seen date and time that the devices last recorded traffic on that
interface
The OUI value enables you to see immediately the vendor of the network
interface card (NIC) that is generating the packets.
Host
Details about the outbound TCP ports on the selected host IP. TCP Ports
Details about the outbound UDP ports on the selected host IP. UDP Ports
Details about the outbound Layer-3 protocols (IP) on the selected host IP. Layer-3 Protocols
Details about the outbound RPC services on the selected host IP. RPC Services
Details about the contexts and values on the selected host IP. Use the
context and value fields to identify:
•
Software version of the application
• Username and password of an account on that host
•
Computer name
Profiles
715 Copyright © 2010, Juniper Networks, Inc.
Chapter 18: Analyzing Your Network