Distribution by conversation shows who is talking with whom (end to end), i.e. which conversation is consuming most of the bandwidth, information valuable for further network optimization.
To see top conversations:
In/Out definition depends on the selected node. For interface traffic In traffic corresponds to traffic that entered the exporter through that interface. For Traffic Patterns In traffic corresponds to the traffic destined to Internal Network in Traffic Pattern definition. For more info, see: |
The screenshot above indicates that top conversation is between X.X.190.17 and X.X.3.38, using HTTPS service and TCP protocol. It is also notable that the conversation consumed Max 6.7 Mbps of Out traffic and 149.4 kbps of In traffic.
For each conversation participant, additional DNS and WHOIS lookup are performed. IP is presented as Hostname, whereas WHOIS description is shown in a tooltip when specific conversation is hovered. Tooltip contains information about organization name and address, network range, additional description and more, depending on data availability. In screenshot above, you can see that the first address relates to organization located in Germany, you can also see network range and name of the organization. By clicking on the arrow keys in the bottom left corner of the tooltip you can switch to info for the other address in this conversation.
|