Brocade Communications Systems IP250 user manual Viewing IPv4 top Icmp talkers

33 IP Traffic analyzer monitoring and sFlow reports

A subtotal is displayed for each of the top users. This subtotal is displayed by source and destination IP addresses. If the report is for a device group, the name and IP address of the device that the traffic accessed appear in parentheses. If the report is for an individual device, only the source and destination IP addresses appear.

At the end of the report, a subtotal for the remaining network users and a total for the entire network are displayed.

Viewing IPv4 – top ICMP talkers

The Top IPV4–ICMP Talkers report shows the top users of IPv4 ICMP services. Complete the following steps to display the report.

1.Select Monitor > Traffic Analysis > Monitor sFlow.

2.On the Monitor sFlow dialog box, choose one of the following options:

•To view a report for a device group, click the report icon for the device group you want.

•To view a report for a device, click the name of the device group to which the device belongs, and on the Device list page, click the report icon for the device.

3.In the Category list, select L3 or L4 Reports.

4.In the Reports list, select IPV4.

5.In the next list, select ICMP.

The report shows the following information:

•IPV4

-Source - The source IP addresses of the IPv4 traffic. If enabled, host names of the IP address are shown in parentheses.

-Destination - The destination IP addresses of the IPv4 traffic. If enabled, host names of the IP address are shown in parentheses.

-TOS/DSCP - The TOS bit value or the Differentiated Services Code Points (DSCP) value in the packets.

•Port - For VCS fabrics, the send and receive ports are from different devices.

-In - The ID of the port on which the traffic is being received.

-Out - The ID of the port on which the traffic is being sent.

•ICMP

-Src Port - ID of the port on which the ICMP packet originated. The value shown in this column can be one of the following values:

ID of the well-known port.

The term “various,” if the value is greater than 1023 (threshold for well-known ports) and if the port number on the other side of the connection is an ephemeral port.

•User (802.1X)

-Source - Name of the user who originated the traffic. This name is the ID the client used to gain access to the network.

-Destination - Name of the user who received the traffic. This name is the ID the client used to gain access to the network.

•Frames - Size of the traffic in frames.

1048	Brocade Network Advisor IP User Manual
	53-1003056-01