|
Network Protocols are based on server ports. Aruba comes with a standard list of Network Protocols that map IP ports to Network Protocol names. Users can also define IP ports (and layer 4 protocols) as Traffic Types, and multiple port numbers can be mapped to the same Traffic Type.
Business Application definitions are based on IP Address/Port pairs. Users can define an Application as one or more pairs. An application can be running on multiple machines and/or multiple ports.
You can drill down into specific hosts, pairs, ports, etc.; this allows you to look for specific traffic (say a virus on port X). Aruba also supports custom reports and queries against flow data.
Aruba shows the following information for any interface, device, or group of interfaces for the selected time period:
- Top N Talkers
- Top N Hosts and Listeners
- Top N Conversations (Host Pairs)
- Top N Network Protocols
- Top N Traffic Types
- Top N Applications
|