Brocade Network Advisor SAN + IP User Manual v12.3.0 - Manual (Page 1788)

1716 Brocade Network Advisor SAN + IP User Manual
53-1003155-01
IP Traffic analyzer monitoring and sFlow reports
43
A subtotal is displayed for each of the top users. This subtotal is displayed by source and
destination IP addresses. If the report is for a device group, the name and IP address of the device
that the traffic accessed appear in parentheses. If the report is for an individual device, only the
source and destination IP addresses appear.
At the end of the report, a subtotal for the remaining network users and a total for the entire
network are displayed.
Viewing IPv4 – top ICMP talkers
The Top IPV4–ICMP Talkers report shows the top users of IPv4 ICMP services. Complete the
following steps to display the report.
1. Select Monitor > Traffic Analysis > Monitor sFlow.
2. On the Monitor sFlow dialog box, choose one of the following options:
• To view a report for a device group, click the report icon for the device group you want.
• To view a report for a device, click the name of the device group to which the device
belongs, and on the Device list page, click the report icon for the device.
3. In the Category list, select L3 or L4 Reports.
4. In the Reports list, select IPV4.
5. In the next list, select ICMP.
The report shows the following information:
• IPV4
- Source - The source IP addresses of the IPv4 traffic. If enabled, host names of the IP
address are shown in parentheses.
- Destination - The destination IP addresses of the IPv4 traffic. If enabled, host names of the
IP address are shown in parentheses.
- TOS/DSCP - The TOS bit value or the Differentiated Services Code Points (DSCP) value in
the packets.
• Port - For VCS fabrics, the send and receive ports are from different devices.
- In - The ID of the port on which the traffic is being received.
- Out - The ID of the port on which the traffic is being sent.
• ICMP
- Src Port - ID of the port on which the ICMP packet originated. The value shown in this
column can be one of the following values:
 ID of the well-known port.
 The term “various,” if the value is greater than 1023 (threshold for well-known ports)
and if the port number on the other side of the connection is an ephemeral port.
• User (802.1X)
- Source - Name of the user who originated the traffic. This name is the ID the client used to
gain access to the network.
- Destination - Name of the user who received the traffic. This name is the ID the client used
to gain access to the network.
• Frames - Size of the traffic in frames.