Andrisoft Wanguard 5.2, Руководство пользователя и администратора, Страница: 12 / 73

WANGUARD 5.2 User Manual & Administrator's Guide
●
Time-frame
Select predefned tme-frames or enter your own by selectng “Custom...”.
●
Flows Filter
Here you can enter a flter for fows. Click the lightbulb icon on the right to open a window containing
the correct syntax. Frequently used fows flters can be saved there and reused at any tme later.
●
Output
You can select several output formats, or you can type your own format that conforms to the format
specifcaton of nfdump.
For beter readability IPv6 addresses are shortened, such as that the middle nibbles are cut and
replaced by dots '…'. Most ofen this is good enough to recognize a wanted IPv6 address your are
looking for. If you need the full IPv6 address, check the opton 'IPv6 long'.
● Export
If the output is small you can send it by Email or you can Print it.
But when you need to generate huge amounts of fow data, doing that solely through the browser may
not be the best idea. In this case, select the “Dump” opton to view the CLI command used to generate
the data. You can execute the command locally, forward the output to a fle etc.
● Aggregaton
By default the fows are not aggregated. By clicking on the checkboxes, you can select how you want to
have your fows aggregated. You may also aggregate entre subnets when selectng srcIPv4/<subnet
bits>.
●
Limit Flows
List only the frst N fows of the selected tme slot.
●
Sortng
When listng fows from diferent Flow Sensors you may sort them according to the start tme of the
fows. Otherwise the fows are listed in sequence of the selected Flow Sensors.
Flows Tops
You can process and flter the fow data to generate tops by entering the felds below:
●
Sensors
Select the Flow Sensor Interfaces that captured the trafc you're interested in. Multple selectons can
be made. Administrators can flter which Sensors are available to users.
● Time-frame
Select predefned tme-frames or enter your own by selectng “Custom...”.
●
Flows Filter
Here you can enter a fows flter. Click the lightbulb icon on the right to open a window containing the
correct syntax. Frequently used fows flters can be saved there and reused at any tme later.
- 11 -