Chapter 6 Monitor

Table 24 Monitor > System Status > Traffic Statistics (continued)

LABEL

DESCRIPTION

Traffic Type

Select the type of report to display. Choices are:

 

Host IP Address/User - displays the IP addresses or users with the most traffic and how

 

much traffic has been sent to and from each one.

 

Service/Port - displays the most-used protocols or service ports and the amount of

 

traffic for each one.

 

Web Site Hits - displays the most-visited Web sites and how many times each one has

 

been visited.

 

Each type of report has different information in the report (below).

 

 

Refresh

Click this button to update the report display.

 

 

Flush Data

Click this button to discard all of the screen’s statistics and update the report display.

 

 

 

These fields are available when the Traffic Type is Host IP Address/User.

 

 

#

This field is the rank of each record. The IP addresses and users are sorted by the amount

 

of traffic.

 

 

IP Address/User

This field displays the IP address or user in this record. The maximum number of IP

 

addresses or users in this report is indicated in Table 25 on page 89.

 

 

Direction

This field indicates whether the IP address or user is sending or receiving traffic.

 

Ingress- traffic is coming from the IP address or user to the ZyWALL.

 

Egress - traffic is going from the ZyWALL to the IP address or user.

 

 

Amount

This field displays how much traffic was sent or received from the indicated IP address or

 

user. If the Direction is Ingress, a red bar is displayed; if the Direction is Egress, a

 

blue bar is displayed. The unit of measure is bytes, Kbytes, Mbytes or Gbytes, depending

 

on the amount of traffic for the particular IP address or user. The count starts over at zero

 

if the number of bytes passes the byte count limit. See Table 25 on page 89.

 

 

 

These fields are available when the Traffic Type is Service/Port.

 

 

#

This field is the rank of each record. The protocols and service ports are sorted by the

 

amount of traffic.

 

 

Service/Port

This field displays the service and port in this record. The maximum number of services

 

and service ports in this report is indicated in Table 25 on page 89.

 

 

Protocol

This field indicates what protocol the service was using.

 

 

Direction

This field indicates whether the indicated protocol or service port is sending or receiving

 

traffic.

 

Ingress - traffic is coming into the router through the interface

 

Egress - traffic is going out from the router through the interface

 

 

Amount

This field displays how much traffic was sent or received from the indicated service / port.

 

If the Direction is Ingress, a red bar is displayed; if the Direction is Egress, a blue bar

 

is displayed. The unit of measure is bytes, Kbytes, Mbytes, Gbytes, or Tbytes, depending

 

on the amount of traffic for the particular protocol or service port. The count starts over at

 

zero if the number of bytes passes the byte count limit. See Table 25 on page 89.

 

 

 

These fields are available when the Traffic Type is Web Site Hits.

 

 

#

This field is the rank of each record. The domain names are sorted by the number of hits.

 

 

Web Site

This field displays the domain names most often visited. The ZyWALL counts each page

 

viewed on a Web site as another hit. The maximum number of domain names in this report

 

is indicated in Table 25 on page 89.

 

 

Hits

This field displays how many hits the Web site received. The ZyWALL counts hits by

 

counting HTTP GET packets. Many Web sites have HTTP GET references to other Web sites,

 

and the ZyWALL counts these as hits too. The count starts over at zero if the number of

 

hits passes the hit count limit. See Table 25 on page 89.

 

 

88

 

ZyWALL 110/310/1100 Series User’s Guide