Top XX IP Address Groups by Conversations

This widget provides a list of the most bandwidth‑intensive conversations associated with an IP Group. Conversations are listed with the amount of data transferred in the conversation, in both bytes and packets, and the percentage of total application traffic generated by the conversation over the specified time period.

When placed on the Node Details or Interface Details view, this widget provides a view of the conversations responsible for the most traffic passing through the viewed node or interface over the selected period of time.

For more information about IP Address Groups defined in your NTA, see Selecting IP Address Groups for Monitoring.

View more details about displayed objects

Click a listed conversation or its corresponding conversation bubble icon to open the NetFlow Conversation view for conversation traffic routed through the relevant monitored node. The NetFlow Conversation view provides both a chart of Total Bytes Transferred in the conversation and a Conversation Traffic History. For more information, see NetFlow Conversation View.

Because there can be two domains for each communication packet processed through a network device, the total traffic counted for IP Address Groups can seem as much as twice what it is.

Click any listed IP address group to open the NetFlow IP Address Summary Group view filtered by the selected IP address group. This view will display the selected IP address group details, together with all other IP address groups the selected group exchanged traffic within the defined time period. For more information, see NetFlow IP Address Group Summary View.

Click + to expand a listed IP address group and to view a list of the nodes and their respective interfaces over which traffic associated with the selected IP address group is currently flowing.

Click any expanded nodes or interfaces to open the NetFlow IP Address Group view presenting related statistics for each IP address group. For more information, see NetFlow IP Address Group View.

Top XX IP Address Groups Conversations (Endpoint Centric)

You can customize an endpoint-centric version of this widget and place it on the NetFlow Node Details or Interface Details view. The endpoint-centric Top XX IP Address Groups Conversations widget provides a ranked list of IP groups conversations in which the selected node or interface initiated or terminated traffic.

For more information about adding endpoint-centric widgets, see Add endpoint-centric widgets to NTA views.

Table legend

The table below the chart provides the following information:

Column Title	Contents
IP Address Group Conversation	The IP address groups conversation endpoints with IP addresses in parentheses.
Ingress Bytes, Egress Bytes Ingress Packets, Egress Packets	Displays the amount of data (in bytes and packets) flowing in the selected IP address group conversation through the viewed node or interface. The columns displayed depend on the flow direction set in the top left corner of the view (either only Ingress Bytes, or only Egress Bytes, or both columns).
Percent (Utilization)	Displays the percentage of all traffic through the viewed object that can be attributed to the appropriate IP address groups conversation. The first value describes the percentage of the appropriate item based on items shown by the chart. Individual items in the legend add up 100%. This percentage can be absolute or relative. For more information, see Set the Percentage type for Top XX lists. A value in parentheses is available only for interfaces. It describes how the appropriate item utilizes the interface bandwidth in percentage. If the utilization is approximately twice as high as it should be, for example 150% instead of 75%, it might be caused by flow duplication. For more information, see Resolve duplicate flows.

Column Title

Contents

IP Address Group Conversation

The IP address groups conversation endpoints with IP addresses in parentheses.

Ingress Bytes, Egress Bytes
Ingress Packets, Egress Packets

Displays the amount of data (in bytes and packets) flowing in the selected IP address group conversation through the viewed node or interface.
The columns displayed depend on the flow direction set in the top left corner of the view (either only Ingress Bytes, or only Egress Bytes, or both columns).

Percent (Utilization)

Displays the percentage of all traffic through the viewed object that can be attributed to the appropriate IP address groups conversation.

The first value describes the percentage of the appropriate item based on items shown by the chart. Individual items in the legend add up 100%. This percentage can be absolute or relative. For more information, see Set the Percentage type for Top XX lists.

A value in parentheses is available only for interfaces. It describes how the appropriate item utilizes the interface bandwidth in percentage.

If the utilization is approximately twice as high as it should be, for example 150% instead of 75%, it might be caused by flow duplication. For more information, see Resolve duplicate flows.

Edit the widget

If you are logged in using a User ID with administrative privileges, you can change the way this widget is displayed for all users:

Click Edit to load the Edit Resource page.
Make changes.
Click Submit.

Edit time and flow direction for the view

You can also change the time period and flows direction shown by all widgets in the view:

Directly below the view name, click next to the appropriate setting and define the appropriate settings.
Change the Relative Time Period, by default set to 1 hour prior to the current time, or specify a specific time period.

The time and flow direction settings are limited to the current session only. After you leave the view, your changes will be lost and default settings are re-applied.