Chapter 7 Viewing and Analysis of Captured Data
52
•Packets filtered — number of filtered (discarded) packets — their source and target
address belongs to the same group or some of these addresses belongs to the
group Discard packet (see chapter 6.1)
•Toobig packets —number of packets that couldn’t be processed because their size
exceeded the maximum size of the cache of the low-level driver of Kerio Network
Monitor. Greater number of these packets can indicate a system error or a possible
attack.
•Transfer failures — number of packets that were not successfully copied from the
internal cache of the network adapter. This error should not occur under normal
circumstances (it can indicate a problem with an adapter or its driver).
•No resources — number of packets that were not successfully processed due to
the lack of system resources.
If this value is in the thousands, Kerio Network Monitor should be installed to a
more powerful computer or to a dedicated computer where no user works.
Disk space used by scanned data The size of disk volume occupied by captured data
from particular services. The number of objects (Items) and bytes (Bytes) is displayed.
The Sum column contains the total space occupied (sum of all services).
Note: Presented data doesn’t include the space occupied by a database of a volume
of transferred data (i.e. subfolders high and low).