If you don't want to see Whois information for your Internal Address in All Traffic Pattern, you can disable it. It is useful, for example, when your internal address range is public address range by default. 


To enable (disable) Whois lookup for All Traffic Internal Addresses:

  1. Go to > Settings > NetFlow Settings > Configuration > Whois lookup > Internal Traffic
  2. Select Enable (Disable)



Disabling Whois lookup Internal Traffic will not disable DNS resolution for Internal Address in All Traffic Pattern


If your firewall or company policy restricts access to Whois servers (port 43), turning off this option prevents NetVizura from attempting Whois lookups, reducing the delay in loading host and conversation tables. Simply set it to Disable if Whois resolution is not permitted in your environment:

  1. Go to > Settings > NetFlow Settings > Configuration > Whois lookup > External Traffic
  2. Select Disable (Enable)


Once you change status of Whois lookup in Settings from Enabled to Disabled and vice versa, it is necessary to refresh the observed view in NetFlow module by pressing the Refresh button in the upper right corner.

  • No labels