Traffic Flow Portlet
Traffic Flow Analyzer uses several types of portlets, one for each of the types of objects on which it reports. These are Applications, Autonomous Systems, Conversations, Endpoints, Exporters, Protocols, Receivers and Senders.
When you add one of the traffic analyzer portlets to a page, its summary, or minimized form appears. This displays a simple view containing a pie chart and a table showing the summarized collected data over the configured time period. The only thing that can be changed in this view is the period. Change this by clicking the clock dropdown button in the upper right corner of the portlet.
The Expanded Traffic Flow Portlet displays an interactive graph. You can also Drill Down to details about components within this portlet by clicking on one of the links in the table below the graph.
The selected period determines whether data is present, especially if you have just started monitoring Traffic Flow. Choose the shortest period to see data immediately (it still takes a few minutes to appear), and select longer periods only after monitoring has run for longer periods.
Expanded Traffic Flow Portlet
Expanded Traffic Flow Portlet
When you expand the portlet, a more complex interactive view appears. Initially, it displays a line graph for the selected period.
It may seem a device reporting the same value as others is not graphed properly, but mousing over the graph displays the value.
The following controls appear in its title bar:
Select Chart Type -- Lets you change the chart type. Available chart types include Pie, Line, Bar, Stacked Bar and Column.
Select Timeframe -- Lets you change the period between Last 15 Minutes, Last Hour, Last 24 Hours, Last 5 Days and Last 30 Days. Data “rolls up” in a summary for each period to the next longest period, so you must select the correct period to see what has been collected.
Data for last 15 minutes typically appears after about 5-10 minutes of collection. At least one point of rollup data appears for the longer periods after the next shorter duration has passed. This means you need a minimum of 5 minutes collecting data to show chart data for the 15 minute interval. A minimum of 15 minutes collecting data needs to occur to show chart data for the last hour, and a minimum of an hour collecting data needs to occur for 24 hour chart data to appear. Finally, a minimum of 24 hours collecting data needs to occur for 30-day chart data to appear.
These figures assume a maximum 256 bytes of data export at 15 second intervals, minimum. If the interval is too much longer then only one flow appears per interval and less data appears. If the flow size is too large it takes more time to accumulate the flow data before the device can send it.
Search -- Displays a search dialogue to find specific traffic data.
Select Report Type -- Lets you change the report type between Top 5, 10 or 25 and Bottom 5, 10 or 25.
Traffic Flow Snapshots -- Load or save a snapshot (preserved views) of traffic flow.
Export to PDF -- Saves the current view to a pdf file. You can retrieve the report in the My Alerts area at the lower left corner of the portal.
Settings -- Configures how to retain data, based on collection / rollup intervals. Minutes rollup to 10-minute intervals, which rollup to hourly, which rollup to daily, which rollup to weekly data. You can also set the maximum number of rows per rollup table.
Below the title bar a navigation bar displays the context path. See Drill Down, below, for more about this.
Below that navigation bar a row containing the following controls appear:
Entity Type -- Selects the type of entity to report on (Applications Detail, Conversations, End points, and so on).
Attribute -- Selects which attribute to graph (Bytes, Packets, Bits/Sec).
Refresh -- Refreshes the screen (runs the report) applying any new settings.
You can check / uncheck by clicking on the colored squares in the legend below these graphs. This reveals / conceals lines connected to the labelled item.