93
Incidents and Events
About incidents and events
Viewing interface details
If you click on a monitoring interface object in the Devices tab, the Details of
Selected Topology Object dialog box displays the following information:
■
Customer ID
: Displays the customer ID that you assigned to the monitored
interface.
■
Interface Name
: Displays the name of the interface on the software or
appliance node to which the monitored interface sends copied data.
■
Media Type
: Displays the type of link being monitored, either Ethernet or
gigabit.
■
Flow Collection
: Displays whether flow status collection is enabled on the
monitored interface.
■
Capture Packet Mode
: Displays whether packet capture mode is enabled on
the monitored interface. A value of Header Only indicates that packet
capture is not enabled. A value of Entire Packet indicates packet capture is
enabled.
■
Description
: Displays the optional description of what is happening.
■
Sensor running message
: Displays whether the sensor is running on the
Network Security interface to the monitored interface.
■
Bit rate
: Displays the average number of megabits per second (Mbps)
monitored on the interface. This calculation is based on payload, which may
differ slightly from the bit rate calculation on a particular switch or router.
■
Packet rate
: Displays the number of packets per second (pps) monitored on
the interface.
■
Percent of packets dropped
: Displays the average percent of packets that
are not being monitored on the interface.
■
Aggregate bit rate
: Displays the aggregate number of megabits per second
(Mbps) monitored on the gigabit interface.
■
Aggregate packet rate
: Displays the aggregate number of packets per
second (pps) monitored on the gigabit interface.
■
Percent of total traffic per sensor
: Displays the percentage of traffic being
sent to each sensor sub-instance monitoring a gigabit link. For example, if
you have 500 Mbps of aggregate bit rate traffic, and Sensor 1 is monitoring
15% of the total traffic, then Sensor 1 is monitoring 500 Mbps x .15 = 75
Mbps.
■
Logged Event Count
: Displays the number of events associated with this
incident that have been logged to the database.
Summary of Contents for 10268947 - Network Security 7160
Page 1: ...Symantec Network Security User Guide...
Page 18: ...18 Introduction Finding information...
Page 34: ...34 Architecture About management and detection architecture...
Page 46: ...46 Getting Started About deploying node clusters...
Page 64: ...64 Topology Database Viewing objects in the topology tree...
Page 124: ...124 Log Files About log files...
Page 134: ...134 Index...