- Date range
- Graph range selector
- Apply a filter
- Groups and applications
- Update view units
- Graph hovers
- Table grids
By default, TrafficInsights presents data for the last 24 hours, from midnight yesterday to midnight tomorrow (e.g., 2018-11-25 00:00 to 2018-11-27 00:00).
You can change the date range. Any date range update you make is applied to all views, not just the one you’re currently on.
- Click the date range picker from the top navigation.
- Pick a new start and end date for viewing data.
- Click Apply.
Graph range selector
At the bottom of all graphs, a range selector allows you to choose a more granular time range for your data.
Select a specific range
Click on a specific location in the range selector and drag your mouse to the end point of the range. Release your mouse. The selected range appears in a purple box and updates the graphs.
Move the range around
You can move the selected range by grabbing the range and sliding it to the left or right. The detail in the graph updates to reflect the new range selection.
Increase or decrease the range
You can grab an edge of the range and drag it to make the range smaller or larger.
Remove the range
To remove the range and revert to the default view, click on any empty location in the selector.
Apply a filter
From the top navigation bar in the TrafficInsights dashboard, click Add Filter. Enter the desired filter and click Apply.
Be sure to enter the correct keyword ahead of the detail you’re trying to filter for. Simply entering 80, for example, won’t apply a filter. Keywords that can be used are:
ip address: ip, src, dst port: port, sport, dport packets: pkts bytes: bytes country: country, country_src, country_dst exporter: exporter interface: iface_in, biface_out asn: asn, asn_src, asn_dst protocol: protocol, proto domain: domain, domain_src, domain_dst post nat: pnat, pnat_src, pnat_dst post nat port: pnat_port, pnat_sport, pnat_dport expression grouping: (, ), and, or comparison operators: =, !=, >, <, >=, <=
You can click the Countries tab to scroll through a list of countries to add to your filter. Once you find the country you want, click the country name to add it to the filter.
To edit the applied filter, click the edit pencil in the top navigation bar.
Update the filter and click Apply.
To remove the filter, click the X in the top navigation bar.
Groups and applications
By default, all applications are shown on the graphs but you can choose to show traffic for specific applications only.
The list of applications in the context menus is a complete list of applications monitored by TrafficInsights. The list isn’t filtered to remove applications not detected on your client devices.
From the top navigation bar, click the compass icon (). From the context menu, hover over the appropriate group to reveal a secondary context menu.
From the secondary context menu, click an application. If there’s traffic data available for the selected application, the graphs will update. Otherwise, you’ll see a No data message.
To clear the application, click the X next to the set application () in the top navigation bar, or click the compass icon () and select All Applications.
Update view units
You can update the view units. Updates to view units apply only to bar graphs.
In the right corner of the top navigation bar, click the three dots. From the context menu, select the unit you’d like to view the detail in.
Available units are bits/s, bytes/s, flows/s, pkts/s, bits, bytes, flows, and packets.
Hovering over any data point on a graph shows you a tooltip with lower-level details about the data point.
For the applications and protocol graphs, the hover highlights a similar data point on the other graph, in addition to showing you the tooltip.
For top N graphs, the hover is shown only for the specific bar graph.
For geolocation, you can hover over a country or city.
For table grids, you can click on a row to reveal more information, or right-click to add or remove columns.
Show more information
For flows, if you click on a cell in the address columns—scr addr and dst addr, for example—you’ll see a context menu. From the context menu, select one of the following options: DNS, Whois, Traceroute, Ping, or Find domain.
Each option opens a dialog that shows additional information.
Once you’ve captured the detail you want from the dialog, click Close or the X to close the dialog window.
Add or remove table columns
For flows, if you right-click anywhere in the table, you’ll see a context menu that shows all available columns. Click on the available columns to add or remove them from the view. To close the context menu, click anywhere in the grid.