This view provides comparison of the node traffic broken down by all available dimensions (interfaces, hosts, conversations, etc.).

It is useful if you want to analyze traffic simultaneously from different perspectives and their relationship.

Screenshot above shows that in the middle of the time window we have atypically high traffic on one interface and by one host. This traffic was made in one conversation by using also atypical service (port).

Clicking on small Conversation chart will tell us that the traffic was made between two internal addresses by using miscrosoft-ds service (port 445) and TCP protocol.