Cisco Systems 5, NAM manual Analyzing Traffic

Chapter 3 Monitoring and Analysis

Analyzing Traffic

Table 3-1

Field	Description
Site	This contain site or source and destination sites (source - destination)
	of the network traffic that generated the alarm message.
Alarm Triggered By	Details information of the network traffic that generated the alarm
	message. The format of the alarm triggered by string are:
	• Triggered by application threshold: application
	• Triggered by application with DSCP threshold: DSCP:codepoint -
	application
	• Triggered by host threshold: host
	• Triggered by host with application threshold: host - application
	• Triggered by host with application and DSCP: DSCP: code point
	- host - application
	• Triggered by host with DSCP: DSCP: code point - host
	• Triggered by conversation: source - destination
	• Triggered by conversation with application: source - application -
	destination
	• Triggered by response time: IAP: client - application - server.
	• Triggered by DSCP: DSCP: code point
	• Triggered by RTP stream: source - source port - codec(codec
	string) - SSRC(number) - destination - destination port
	• Triggered by voice signaling: Calling (address - number) Called
	(address - number) ID/References(id() - ref(calling:called))
	• Triggered by NDE interfaces: NDE: Device (address) -
	If-Index(number) - Ingress/Egress
Threshold Variable	Parameter of the threshold that is used to evaluate alarm condition.
Threshold Value	User defined rising value of the threshold variable.
Triggered Time	Time when the alarm condition was found occurred.
Triggered Value	Parameter value when the alarm condition was raised. Note: The
	triggered value could be - when the viewing window does not included
	the alarm when it was occurring.
Clear Time	Time when the alarm condition was resolved. The alarm variable has
	fallen below the falling threshold value.

Analyzing Traffic

The charts available under the “Analyze” menu show statistics that occur over time.

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

3-8 OL-22617-01