Suspicious Connections Report
- Last Updated: August 28, 2024
- 6 minute read
- WhatsUp Gold
- Version 2024
Suspicious Connections Report report reveals traffic and conversations with IP addresses identified in blacklist databases or tracked using the IP Reputation Library.
了解列数据
每个报告的默认视图包含一个有以下列的网格:
- Conversation. Host ID or IP address of source and destination endpoints (SourceHost —> DestinationHost).
- Suspicious IP. IP address that correlates with an address known to the IP Reputation Library.
- List Name. Descriptor for the black list source name (substring/last part of the full list name).
-
- 字节。已传输字节数总数(进/出)。(使用报告设置的
排序选项,来按数据包或流计数而不是字节数对列表排名。)
- 字节。已传输字节数总数(进/出)。(使用报告设置的
- Bit Rate. Average bit rate.
- Byte Percentage. Percentage of the total traffic.
要显示流和数据包测量值,请单击列选择列表 (
) 的列标题 (
)。也可以包括:
- Sender Latitude. Degrees latitude associated with the endpoint's city.
- Sender Longitude. Degrees longitude associated with the endpoint's city.
- Receiver Latitude. Degrees latitude associated with the endpoint's city.
- Receiver Longitude. Degrees longitude associated with the endpoint's city.
Generate a report
Choose source.Choose a networking device or single physical or virtual interface. Choose traffic direction across an interface.
Choose time constraints.
Choose times. (Subject to NTA
collection interval and retention policies.)Choose,
filter, and reorder columns.
Choose and hide
columns, reorder columns, and apply advanced filters
to customize your data view. Chart, adjust output, and visualize.
Apply chart, geo mapping (World Map), and display options in
Report Settings
dialog (optional). -
导出报表数据
报告数据可以从 WhatsUp Gold 导出、重复使用和以多种格式分发。从“仪表板选项”(
) 菜单中选择展开 (
)。在展开报告后,选择“导出数据”图标以访问以下选项:- HTML。生成并下载一个 .htm 文件,显示在 WhatsUp Gold 用户界面中出现的报告数据。
- Excel。生成并下载包含报告数据的 .xml 电子表格。
- CSV。 生成并下载包含报告数据的 .csv 文件。
- 文字:生成并下载包含报告数据的 .txt 文件。
- 导出时间表。针对报告数据导出设置周期性的日期和时间、格式和电子邮件目的地。