3-8
User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01
Chapter 3 Monitoring and Analysis
Analyzing Traffic
Analyzing Traffic
The charts available under the “Analyze” menu show statistics that occur over time.
Tab l e 3-1
Field Description
Site This contain site or source and destination sites (source - destination)
of the network traffic that generated the alarm message.
Alarm Triggered By Details information of the network traffic that generated the alarm
message. The format of the alarm triggered by string are:
• Triggered by application threshold: application
• Triggered by application with DSCP threshold: DSCP:codepoint -
application
• Triggered by host threshold: host
• Triggered by host with application threshold: host - application
• Triggered by host with application and DSCP: DSCP: code point
- host - application
• Triggered by host with DSCP: DSCP: code point - host
• Triggered by conversation: source - destination
• Triggered by conversation with application: source - application -
destination
• Triggered by response time: IAP: client - application - server.
• Triggered by DSCP: DSCP: code point
• Triggered by RTP stream: source - source port - codec(codec
string) - SSRC(number) - destination - destination port
• Triggered by voice signaling: Calling (address - number) Called
(address - number) ID/References(id() - ref(calling:called))
• Triggered by NDE interfaces: NDE: Device (address) -
If-Index(number) - Ingress/Egress
Threshold Variable Parameter of the threshold that is used to evaluate alarm condition.
Threshold Value User defined rising value of the threshold variable.
Triggered Time Time when the alarm condition was found occurred.
Triggered Value Parameter value when the alarm condition was raised. Note: The
triggered value could be - when the viewing window does not included
the alarm when it was occurring.
Clear Time Time when the alarm condition was resolved. The alarm variable has
fallen below the falling threshold value.