Suspicious Connections Report report reveals traffic and conversations with IP addresses identified in blacklist databases or tracked using the IP Reputation Library.

注: You add tracking of suspicious IPs using Internet community resources such as Tor lists from the IP Reputation Library.

了解列数据

每个报告的默认视图包含一个有以下列的网格:

  • Conversation. Host ID or IP address of source and destination endpoints (SourceHost —> DestinationHost).
  • Suspicious IP. IP address that correlates with an address known to the IP Reputation Library.
  • List Name. Descriptor for the black list source name (substring/last part of the full list name).
    • 字节。已传输字节数总数(进/出)。(使用报告设置的

      排序选项,来按数据包或流计数而不是字节数对列表排名。)
  • Bit Rate. Average bit rate.
  • Byte Percentage. Percentage of the total traffic.

要显示流和数据包测量值,请单击列选择列表 () 的列标题 ()。也可以包括:

  • Sender Latitude. Degrees latitude associated with the endpoint's city.
  • Sender Longitude. Degrees longitude associated with the endpoint's city.
  • Receiver Latitude. Degrees latitude associated with the endpoint's city.
  • Receiver Longitude. Degrees longitude associated with the endpoint's city.

    More...

    Generate a report

    Choose source.Choose a networking device or single physical or virtual interface. Choose traffic direction across an interface.

    Choose time constraints. Choose times. (Subject to NTA collection interval and retention policies.)Choose, filter, and reorder columns. Choose and hide columns, reorder columns, and apply advanced filters to customize your data view.

    Chart, adjust output, and visualize. Apply chart, geo mapping (World Map), and display options in Report Settings dialog (optional).

  • 导出报表数据

    报告数据可以从 WhatsUp Gold 导出、重复使用和以多种格式分发。从“仪表板选项”() 菜单中选择展开 ()。在展开报告后,选择“导出数据”图标以访问以下选项: