Network Overview
The Network Overview page summarizes network traffic observed from packet mirroring. Data is aggregated in 5-minute intervals.
Menu: Network › Overview
Summary cards
| Card | Shows | Drill-down |
|---|---|---|
| Total Traffic | Total bytes, split into download (↓) and upload (↑) | Total Traffic by host |
| Avg Throughput | Average bits per second and the peak value | — |
| Connections | Total connections, split into internal and external | Total Connections by host |
| Active Hosts | Number of active hosts and total packets | Active IPs by host |
| TCP Issues | TCP retransmissions (retr) and resets (rst) | TCP Retransmissions by host |
Panels
| Panel | How to read it |
|---|---|
| Traffic Throughput | Throughput over time. Switch between In / Out and Total |
| Protocol Distribution | Share of connections by transport protocol (TCP, UDP, ICMP) |
| Top Internal Hosts | Internal hosts ranked by bytes, with inbound, outbound, and connection counts |
| Top External Hosts | External traffic ranked by bytes. Switch between Countries, Destinations, and Organizations |
| TCP Health | Retransmissions, resets (RST), and zero-window events over time. High values can indicate congestion, packet loss, or failing connections |
| Top 10 Flows | Largest source–destination flows by bytes, with port, protocol, inbound, outbound, and connection counts |
Metric drill-down pages
Selecting a summary card opens a ranked table of hosts for that metric.
| Drill-down | Ranked by | Other columns |
|---|---|---|
| Total Traffic | Total bytes | In, out, connections, external, retransmits |
| Total Connections | Total connections | Internal, external, traffic, retransmits |
| Active IPs | Traffic bytes | Connections, external, in, out |
| TCP Retransmissions | TCP retransmissions | RST, zero window, connections, traffic |
On every drill-down page you can:
- Filter hosts by Internal, External, or All.
- Choose the number of rows per page (10, 25, 50, or 100).
- Open Asset or Records for any host.