Analysis Guide

The Network Overview page provides access to the IOTA's analysis dashboards, for exploring metadata extracted for captured traffic.

The drop-down menu in the top-left corner of the screen allows you to navigate between the different dashboards.

In the top-right corner of the screen, the time range can be selected, and the PCAP Download button allows you to download the raw data for the selected time range and filters in PcapNG file format. The Live button allows you to enable or disable the automatic refreshing of the dashboard with new captured data.

The Overview Bandwidth and Overview Packets dashboards display a time graph giving an overview of bandwidth usage and number of packets over time respectively for the selected time range.

You can select the time range in the top-right corner of the screen, and also click and drag on the time graph itself to create a selection for a specific time range. You can click and drag this selection to move it along the time graph, and click and drag the edges of this selection to adjust its start and end time. The contents of the sections below are automatically updated based on this selection. Right-click the selection to open its context menu, allowing you to zoom in on it, reset the zoom, or clear the selection.

The sections below the time graph display metadata for the top entries in the selected time range for the selected categories. The categories can be changed using the drop-down menu in the top-left corner of each section.

Selecting the category of data to display

The view can be changed between table and doughnut chart, and the number of entries and columns can be adjusted, using the buttons in the top-right corner of each section.

Adjusting the number of entries and columns to display

The contents of these sections are automatically updated based on the selected time range.

In the table view, you can click an underlined value and then View Details to navigate to its Details page (see Data Details below). The same can be done in the doughnut chart view by clicking one of the values and then View Details.

The Overview Top Applications, Overview Top Clients, and Overview Top Servers dashboards display a doughnut chart and a table giving an overview of the top applications, clients and servers respectively for the selected time range.

The number of entries and the columns in the table can be adjusted using the menu in the top-right corner of the table. Setting the number of entries in the table to 20 or more will update the doughnut chart to display 20 entries. The sorting order of the entries in the table can be changed by clicking the column titles, which will also update the doughnut chart to display the top entries displayed in the table.

Clicking an underlined value in the table or an entry in the doughnut chart and then View Details will navigate to its Details page (see Data Details below).

The Overview Global Traffic dashboard displays a world map providing an overview of traffic based on country, with each country colored depending on the number of hosts, amount of traffic, or latency, for the selected time range.

The metric to target can be changed using the menu in the top-right corner of the map. Clicking a country and then View Details will navigate to its Details page (see Data Details below).

The Data Details dashboard allows you to display accumulated data for the selected time range and filters.

Note: Selecting View Details for a value in the other dashboards will navigate to a Details page with a pre-filled filter for the selected value and a back arrow for navigating to the previous dashboard. This Details page and the Data Details dashboard are functionally the same.

Filters can be managed in the Filters section at the top of the dashboard. To add a filter, click the + button and select a filter parameter from the list, after which a list of possible values to choose from will be displayed (this can take a few seconds to appear depending on the amount of data). Clicking the equals sign (=) allows you to change the filter operator. When adding more than one filter, the operator between filters can be changed between AND and OR. These filters are applied both to the dashboard display and to the Download PCAP feature. Click the Apply button to query the database and display data matching the selected filters and time range.

In the table displaying entries of accumulated data, the primary parameter can be changed using the drop-down menu in the top-left corner. The number of entries and columns to display can be changed using the menu in the top-right corner. Clicking an underlined value in the table allows you to add an include or exclude filter to the query for this value. For certain values, a View Details option is also available, creating a new query with an include filter for this value.

The Download traffic PCAP button on the left of each table entry allows you to download the accumulated traffic for this entry. The PCAP Download button in the top-right corner of the page allows you to download the accumulated traffic for all displayed entries in the selected time range.