AppFlow Monitor Views

Three views are available for the AppFlow Monitor: List View, Pie Chart View, and Flow Chart View. Each view provides a unique display of incoming, real-time data.

Topics:

List View

In the List View, each AppFlow tab comprises columns displaying real-time data. These columns are organized into sortable categories. Some columns are common to all tabs.The VoIP tab, however, also has columns specific to it. There are tooltips and flow tables associated with some column items.

Topics:
Columns Common to All Tabs
 

Check Box

Allows the selection of the line item for creation of filters and rules.

Main Column

The title of the Main Column depends on the selected tab. For example, if the Users tab is selected, then the Main Column header is Users and the column lists the names of users connected to the network. Clicking on an item in this column displays a tooltip with relevant information on the item; see Detail Tooltips .

Sessions

Displays the number of sessions associated with the item in the Main Column. Clicking on this number displays a Flow Table of all the sessions.

Total Packets

Displays the number of data packets transferred per item.

Total Bytes

Displays the number of bytes transferred per item.

Ave Rate (KBps)

Displays the current average rate at which data is transferred per item, calculated over the lifetime of a connection.

Threats

Displays the number of threats encountered by the network per item.

Total

Displays, at the bottom of the list, the total Items listed, Sessions, Total Packets, and Total Bytes sent during the duration of the current interval.

Columns Unique to VoIP Tab
 

Out of Sequence/Lost Pkts

Displays the number of packets either out of sequence or lost per item.

Avg Jitter (msec)

Displays the average jitter rate, in milliseconds, per item.

Max Jitter (msec)

Displays the maximum jitter rate, in milliseconds, per item.

Customizing the Display

You can select which columns to display for each of the tabs.

To customize the display:
1
Click the Configure icon. The Select Columns to Display dialog displays.

2

All tabs:

 

 

# (number)
Rate
Threats
Show commas in numeric fields

VOIP only:

 

 

 
3
Click Save.
Detail Tooltips

Each item listed in the Main Column provides a link to a Detail tooltip, which appears when an item link is clicked. The information provided by the tooltip depends on the tab. For example, clicking on an Application column item in the Applications tab displays a Signature Details tooltip, while clicking on a User column item in the Users tab displays a User Details tooltip.

Topics:
Signature Details

User Details

Initiator Details

Responder Details

Device Details

Flow Tables

Each item in the Sessions column contains a link to a Flow Table containing relevant information on that session/flow:

 

Start Time

Last Update

Init (Initiator) MAC

Resp (Responder) MAC

Init IP

Resp IP

Proto,

Init Port

Resp Port

Init Iface

Resp Iface,

Init Bytes

Resp Bytes

Rate (Kbps)

Status

Details

The Flow Table appears when a link is clicked. Further information can be obtained by hovering the cursor over the Statistics icon in the Details column. Doing so displays a tooltip containing:

 

Flow ID

Init Gateway

Resp Gateway

VPN Traffic

App Name

If relevant:

Intrusion Name

Virus Name

Spyware Name

 

Pie Chart View

The Pie Chart View displays the number of top items and the percentage of bandwidth used by each. The percentage of bandwidth used is determined by taking the total amount of bandwidth used by the top items and then dividing that total by the number of items.

Flow Chart View

The Flow Chart View displays the network usage according to the Kbps used over the specified period. For each AppFlow Monitor tab, you can select, in the:

Most Frequent—The top entries in the AppFlow Monitor tab.
NOTE: The most frequent entries may change over time. If you select Most Frequent, you can restrict the most frequent entries to those displayed at a particular time by clicking the Lock icon next to the drop-down menu.
Auto Y-Scaling (default).