WANGUARD 5.2 User Manual & Administrator's Guide
Sensor Graphs
Sensor Graphs allows you to generate various Sensor-related histograms for the selected Sensor(s):
●
Data Units
Select one or more parameters:
◦
Default
– Shows most used parameters, each one in a diferent graph.
◦
Packets –
The packets/second rate.
◦
Bits –
The bits/second throughput.
◦
Distributon
– Sensors can collect protocols distributon data for: HTTP, HTTPS, SMTP, POP3, IMAP,
SNMP, FTP, SSH, TELNET, SQL, NETBIOS, MS-DS, MS-RDP, DNS, ICMP, OTHERS.
◦
Bytes –
The bytes/second throughput.
◦
IPs –
The number of IP addresses that sent or received trafc.
Only your network's IP addresses are
counted. A spike in this graph usually means that an IP class scan was performed.
◦
Received frames –
For Snifng Sensors it represents the rate of received packets before validaton.
For Flow Sensors it represents the rate of received fows before validaton.
◦
Dropped frames –
For Snifng Sensors it represents the number of packets dropped in the capturing
process. When the number is high, it indicates a snifng performance problem. For Flow Sensors it
represents the number of unaccounted fows. If the number is high it indicates a performance problem
on the Flow Sensor or a network connectvity issue with the fow exporter.
◦
Unknown frames –
For Snifng Sensors it represents the rate of invalidated packets. For Flow
Sensors it represents the rate of invalidated fows.
◦
Unknown Sources
The number of source IP addresses that didn't pass validaton.
◦
Unknown Destnatons
The number of destnaton IP addresses that didn't pass validaton.
◦
Avg Packet Size
The average packet size: bits/packet.
◦
CPU%
The CPU percent used by the Sensor process.
◦
RAM
The amount of memory used by the Sensor process.
◦
Load
The load of the operatng system for the last 5 minutes.
◦
IP Graphs
The number of updated IP graphs fles.
- 21 -
Содержание Wanguard 5.2
Страница 1: ......