View Traffic-Reporting Interfaces

The Traffic Reporting Interfaces view shows the list of all interfaces on the network that send the traffic data to Leaf Collectors. This topic includes the following sections:

• View Interfaces with Threshold Exceptions
• View Interface Details
• Use Dashboard for Traffic-Reporting Interfaces
• Drill Down to Application Details
• Launch Interface Reports

To view the Traffic Reporting Interfaces:

1. In the Workspaces navigation pane, select the Traffic Analysis workspace.
2. Select the Traffic Reporting Interfaces view.

For each node displayed, you can see the following information:

• Threshold State: Threshold state for the node. The states can be Exceeded or Normal.
• Interface Name: Name of the interface.
• Hosted On: Hostname of the system that hosts the flow reporting interface.
• Traffic Type: Type of traffic data that the interface forwards to the Leaf Collector.
• Flow Processing Enabled: Shows if the interface is enabled to collect flow packets.
• Tenant Name: Name of the tenant to which the node is assigned to.
• Is Active: Shows whether the device is actively sending the traffic data to the Leaf Collector or not.
• Traffic Master Server: Fully Qualified Domain Name (FQDN) of the Master Collector that is processing the flows.
  When the NNM iSPI Performance for Traffic is configured in GNM, the column displays the FQDN of the regional Master Collector that processes and forwards the flows to the Global Master Collector.

For more details about each interface, open the Traffic Reporting Interface form.

Also, you can select an interface and open a dashboard specific to the selected interface (see ).

Analysis Pane in the Traffic Reporting Interfaces view

The Analysis Pane in the Traffic Reporting Interfaces view provides additional details about the selected interface.

The Summary Pane displays the following details:

• Traffic Interface Class: The class name of the interface.
• Provider Date: The date when the data was requested from the interface for the last time.
• Total In: Total incoming traffic (in bytes) to the interface.
• Total Out: Total outgoing traffic (in bytes) from the interface.

The rightmost pane displays the following tabs:

• Top Apps-In: This tab displays a pie-chart for the applications that contribute the maximum amount of the incoming traffic volume for the selected node or interface. The chart shows the distribution of the traffic flow data for the last one hour, with each application represented by a unique color. Click a section to view the application name and its contribution to the total volume of incoming traffic. Click a section to view the application group name and its contribution to the total volume of incoming traffic.
• Top Apps-Out: This tab displays a pie-chart for the applications that contribute to the maximum amount of the outgoing traffic volume for the selected node or interface. The chart shows the distribution of the traffic flow data for the last one hour, with each application represented by a unique color. Click a section to view the application name and its contribution to the total volume of outgoing traffic. Click a section to view the application group name and its contribution to the total volume of outgoing traffic.
• Top ToS-In: In this tab, a pie chart displays the top Type-of-Service values reported by the interface that are contributing to the ingress network traffic.
• Top ToS-Out: In this tab, a pie chart displays the top Type-of-Service values reported by the interface that are contributing to the egress network traffic.
• Top IP Protocol-In: In this tab, a pie chart displays the top IP protocols reported by the interface that are contributing to the ingress network traffic.
• Top IP Protocol-Out: In this tab, a pie chart displays the top IP protocols reported by the interface that are contributing to the egress network traffic.
• Performance: The Performance tab for a selected flow enabled interface displays the following graphs for the last one day:
  • Average Utilization for the selected interface Analyzes the Utilization (avg), Utilization In (avg), and Utilization Out (avg) metrics. This is displayed only if NNM iSPI Performance for Metrics is installed.
  • Availability for the selected interface Analyzes the Availability (avg) metric. This is displayed only if NNM iSPI Performance for Metrics is installed.
  • Interface Traffic Flows for the selected interface Analyzes the Number of Flows - Outgoing (sum) and Number of Flows - Incoming (sum) metrics.
  • Traffic Volume for the selected interface Analyzes the Volume - In Bytes (sum) and Volume - Out Bytes (sum) metrics.

  These metrics may display different values in these graphs than those in the NNM iSPI Performance for Traffic report graphs, due to different time grain selected for metrics summarization.

  You can change the metrics and the time range for these graphs as follows:

  To display the metric value for a specific point of time, hover the mouse pointer on the graph:

  

  To display or hide a metric, click the metric name on the legend:

  

  To view the graph as a table:

  1. Click Options.
  2. Select View as Table.

  To select a date range for the graphs:

  1. Click Show Date Range Panel on the top right corner of the Performance tab.

  2. Click the graph that you want to change.

     To apply the new date range on all graphs, select All on the Date Range panel.

  3. Select a time range for the graphs.

  View Interfaces with Threshold Exceptions

  The Threshold Exceptions Reporting Interfaces view shows the list of all nodes on the network that host at least one interface that breached a NNM iSPI Performance for Traffic threshold.

  To access the Threshold Exceptions Reporting Interfaces view:

  1. In the Workspaces navigation pane, select the Traffic Analysis workspace.
  2. Select the Threshold Exceptions Reporting Interfaces view.

  For each interface displayed, you can see the following information:

  • Threshold State: Threshold state for the node. The states can be Exceeded or Normal.
  • Interface Name: Name of the interface.
  • Hosted On: Hostname of the node that exports flows.
  • Flow Processing Enabled: Indicates whether flow processing is enabled on the interface.
  • Traffic Type: Type of traffic data passing through the node.
  • Tenant Name: Name of the tenant to which the node is assigned to.
  • Traffic Master Server: Fully Qualified Domain Name (FQDN) of the Master Collector that is processing the flows.
    When the NNM iSPI Performance for Traffic is configured in GNM, the column displays the FQDN of the regional Master Collector that processes and forwards the flows to the Global Master Collector.

View Interface Details

The Traffic Reporting Interface form provides details about the selected Traffic Reporting interface.

The Threshold Exceptions Reporting Interfaces view shows the list of all interfaces on the network that breached a NNM iSPI Performance for Traffic threshold. For information on the interfaces that breached a threshold, see Threshold Exceptions Reporting Interfaces View.

To view a Traffic Reporting Interface form:

1. In the Workspaces navigation pane, select the Traffic Analysis workspace.
2. Select the Traffic Reporting Interfaces view (or the Threshold Exception Reporting Interfaces view).
3. Select an interface and click Open.

The General pane enables you to analyze the following information for the selected flow-enabled interface:

• Interface Name: Qualified name of the interface.
• Hosted on: Hostname of the system that hosts the flow reporting interface.
• Traffic Type: Type of the traffic data the interface sends to the Leaf Collectors.
• Flow Processing Enabled: Shows if the interface is enabled to collect flow packets.
• Threshold State: Shows the threshold state for the node. The state can be Exceeded or Normal.
• Tenant Name: Shows the name of the tenant to which the node is assigned to.

The Activity State pane shows the following information for the selected flow-enabled interface:

• Is Active: Shows active and inactive flow-enabled interfaces. When a flow-enabled interface does not send traffic data for a specified detection interval, the interface is shown as inactive and does not contribute to license point consumption.
• Last Flow Received At: Shows when the Leaf Collector received the last flow packet. If you restart the Master Collector, this field shows 'No flows received since Master start'. This field is automatically updated when the Master Collector receives traffic data.

The default detection interval to determine the inactive status of the flow-enabled interface is 720 minutes. When flow is detected on the inactive flow-enabled interface before the next polling starts, this interface is marked as active again in the next polling cycle. The default polling interval is 60 minutes. You can modify the polling interval as follows:

1. On the Master Collector system, go to the following directory:

   On Windows
   %nnmdatadir%\nmsas\traffic-master\conf

   On Linux
   /var/opt/OV/nmsas/traffic-master/conf

2. Use a text editor to open the nms-traffic-master.address.properties file.
3. Set the inactive-flow.detection.interval property to a required value (in minutes) of the detection interval that determines the inactive status of the flow-enabled interface.
4. Set the inactive-flow.detector.thread.wake-up.interval property to a required value (in minutes) of polling interval. Reducing this time interval significantly might impact the performance of the Master Collector. You can reduce the polling interval to a minimum value of 1 minute.
5. Save and close the file.

The right pane shows the following details for ingress and egress flows collected by the interface:

• Top 5 Sources
• Top 5 Destinations
• Top 5 Conversations
• Applicable Threshold
• Incidents

Click , and then click Open to open the Interface form for the selected interface.

The Analysis pane displays additional details about the selected interface. For more information about Analysis pane, see Traffic Reporting Interfaces View.

Use Dashboard for Traffic-Reporting Interfaces

The dashboard for a traffic-reporting interface provides a snapshot of the network traffic originating from the interface.

To launch the dashboard for a traffic-reporting interface, right-click an interface in the Traffic Reporting Interfaces view (or the Threshold Exception Reporting Interfaces view) under the Traffic Analysis workspace, and then click Open Dashboard.

This dashboard displays the following tables and charts:

Dashboard View of a Traffic-Reporting Interface

Dashboard Item	Description
Top Applications in Incoming Traffic (Utilization) - Graph	The graph shows the area graph of the Volume - Utilization metric for the top ten applications with highest Volume - Utilization values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Applications in Incoming Traffic (Bytes) - Graph	The graph shows the area graph of the Volume - In Bytes (sum) metric for the top ten applications with highest Volume - In Bytes (sum) values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Applications in Outgoing Traffic (Utilization) - Graph	The graph shows the area graph of the Volume - Utilization metric for the top ten applications with highest Volume - Utilization values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Applications in Outgoing Traffic (Bytes) - Graph	The graph shows the area graph of the Volume - Out Bytes (sum) metric for the top ten applications with highest Volume - Out Bytes (sum) values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Destinations in Incoming Traffic (Utilization) - Graph	The graph shows the area graph of the Volume - Utilization metric for the top ten destinations with highest Volume - Utilization values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Destinations in Incoming Traffic (Bytes) - Graph	The graph shows the area graph of the Volume - In Bytes (sum) metric for the top ten destinations with highest Volume - In Bytes (sum) values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Destinations in Outgoing Traffic (Utilization) - Graph	The graph shows the area graph of the Volume - Utilization metric for the top ten destinations with highest Volume - Utilization values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Destinations Outgoing Traffic (Bytes) - Graph	The graph shows the area graph of the Volume - Out Bytes (sum) metric for the top ten destinations with highest Volume - Out Bytes (sum) values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Sources in Outgoing Traffic (Bytes) - Graph	The graph shows the area graph of the Volume - Out Bytes (sum) metric for the top ten sources with highest Volume - Out Bytes (sum) values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Sources in Incoming Traffic (Bytes) - Graph	The graph shows the area graph of the Volume - In Bytes (sum) metric for the top ten sources with highest Volume - In Bytes (sum) values. You can select the line, bar, or scatter graph for a detailed analysis.
Top Talkers in Incoming Traffic (Bytes) - Report	Ranks top 10 talkers (source-destination interface pairs) with highest Volume - In Bytes (sum) metric values in a table.
Top Talkers in Outgoing Traffic (Bytes) - Report	Ranks top 10 talkers (source-destination interface pairs) with highest Volume - Out Bytes (sum) metric values in a table.
Top Talkers in Incoming Traffic (Utilization) - Report	Ranks top 10 talkers (source-destination interface pairs) with highest Volume - Utilization metric values in a table.
Top Talkers in Outgoing Traffic (Utilization) - Report	Ranks top 10 talkers (source-destination interface pairs) with highest Volume - Utilization metric values in a table.
Top Apps-out - Pie chart	The pie chart shows top six applications with highest Volume - Out Bytes (sum) values.
Top ToS-in - Pie chart	The pie chart shows top six types of service with highest Volume - In Bytes (sum) values.
Top ToS-out - Pie chart	The pie chart shows top six types of service with highest Volume - Out Bytes (sum) values.
Top IP Protocol-in - Pie chart	The pie chart shows top six protocols with highest Volume - In Bytes (sum) values.
Top IP Protocol-out - Pie chart	The pie chart shows top six protocols with highest Volume - Out Bytes (sum) values.
Performance	This panel shows the performance graph of the selected interface.

All panels (except for the Performance panel) show the data for the last one hour by default. You can use the Time Filter option to change the time period.

Drill Down to Application Details

To launch the dashboard for top applications, launch the traffic-reporting interface dashboard, and then click one of the hyper-linked applications listed in dashboard panels.

This dashboard displays the following charts and reports:

Application Dashboard

Dashboard Item	Description
Top Sources for the Application (Bytes)- Pie Chart	The pie chart shows top ten sources mapped to this application with highest Volume - Bytes (sum) values. Each source represents a section in the chart.
Top Sources for the Application (Bytes)- Report	The report shows top ten sources mapped to this application with highest Volume - Bytes (sum) values.
Top Destinations for the Application (Bytes) - Pie Chart	The pie chart shows top ten destinations mapped to this application with highest Volume - Bytes (sum) values. Each destination represents a section in the chart.
Top Destinations for the Application (Bytes) - Report	The report shows top ten destinations mapped to this application with highest Volume - Bytes (sum) values.
Top Talkers for the Application (Bytes) - Pie Chart	The pie chart shows top ten talkers (source-destination pairs) mapped to this application with highest Volume - Bytes (sum) values. Each talker represents a section in the chart.
Top Talkers for the Application (Bytes) - Report	The report shows top ten talkers (source-destination pairs) mapped to this application with highest Volume - Bytes (sum) values.
Top Ports for the Application (Bytes) - Report	The report shows top ten ports with highest Total Volume - Bytes (sum) values that are participating in this application traffic.

Launch Interface Reports

The Traffic Reporting Interfaces inventory enables you to launch NNM iSPI Performance for Traffic reports in the NPS console with the context of a selected interface. To launch a report from the inventory, right-click a node in the Traffic Reporting Interfaces view (or the Threshold Exceptions Reporting Interfaces view), and then select NNM iSPI Performance > Traffic Reports - Report Menu.

Alternatively, after selecting the interface of your choice, click Actions > NNM iSPI Performance > Traffic Reports - Report Menu.