Top Applications

This dashboard report displays the applications used by devices generating the most traffic traveling in the selected direction (Inbound, Outbound, Inbound and Outbound, or Bounce) on the selected interface. Application definitions are created using the Map Ports to Applications dialog (Flow Monitor > Applications > New or Edit) which maps port numbers to applications. Application data is useful in determining the types of tasks persons on the network are conducting the most over the selected time period.

You can choose to display and sort sender traffic by bytes, packets, or flows using the Display and sort by option on the report configuration dialog. Providing alternate sorting methods allows you to monitor and identify hosts that are the largest consumers of interface resources other than bandwidth.

• Application. Displays the application used by the devices generating the highest traffic on the selected interface.

Note: Traffic that flows between unmonitored ports is considered unclassified. In Flow Monitor, for traffic to be considered "unclassified," both the port from which the data is sent, and the receiving port must not be mapped to an application in the Configure Application dialog. If either the sending or receiving port is mapped to an application, the traffic is associated with the application.

If Flow Monitor detects a large amount of traffic to an unmonitored port, this dashboard report displays a yellow warning flag that explains the situation and guides you in defining the unmonitored port. This can help you to proactively detect emerging non-standard traffic on your network. You can also use the Unclassified Traffic dialog by selecting (Flow Monitor > Flow Unclassified Traffic) to view all unclassified traffic for the selected date range.

• You can select one of the following units to display and sort the specific items in the report using the Display and sort by option on the report configuration dialog. The selected option appears as the first column header in the report and is used to sort the top "n" items.
  • Bytes. Displays the total number of bytes transmitted for the specific item in the report category for the selected date range.
  • Packets. Displays the total number of packets for the specific item in the report category for the selected date range.
  • Flows. Displays the total number of flows for the specific item in the report category for the selected date range.
• Throughput. Displays the average bit rate, packet rate or flow rate, in multiples of the selected unit (e.g. Kbps, Mbps, or Gbps) for the specific item in the report category for the selected date range.
• Usage. Displays the percentage of the total available bandwidth used by the specific item in the report category for the selected date range.

  Note: Utilization is displayed as N/A if a speed is not specified for the interface, or if you have selected to display packets or flows in the report. If you are displaying bytes, you can set the interface speed on the Flow Interface dialog. To navigate to the Flow Interface dialog, click the Configure link in the message appearing above the dashboard reports.

• Percentage. Displays the percentage of the total traffic for the specific item in the report category for the selected date range.
• Totals (row title). Displays the total of all of the items in the report category, specified and unspecified (Others). This row shows the interface totals for each column in the report.

For more information

About interface traffic directions

Configuring this dashboard report in Flow Monitor

Exporting data from this dashboard report

About dashboard reports and filters