About the Flow Monitor: Top Senders with Failed Connections report
This dashboard report displays the devices that initiated the highest number of unsuccessful TCP connection attempts, or SYN packets, in the selected direction (Inbound, Outbound, Inbound and Outbound, or Bounce) on the selected interface.
Essentially, the listed host has tried to establish a TCP connection to another device but has not succeeded. Devices listed in this report may be conducting port scanning--a practice used by hackers to find potential intrusion points on a network.
By default, devices are listed by hostname, however you can configure this report to list the devices by IP address by selecting on the report configuration dialog.
- . Displays the host name of the top sender with the most failed connections.
- . Displays the number of failed connection attempts.
- . Displays the percentage ranking of the item with the top n items of the category.
: You can hover over a hostname to display popup information about the host name's IP address. If you right-click the hostname, a filter is created that uses the host as the filter criteria and the Interface Details dashboard reloads with this filter applied.
: WhatsUp Gold Flow Monitor can only find failed connections on sources that are not sending sampled data.
For more information
About interface traffic directions
: For illustration purposes, the descriptions and diagrams in the table below assume that traffic is passing from an internal interface to an external interface or vice versa. In reality, traffic may pass from an internal interface to another internal interface, an external interface to another external interface, or traffic may be routed out the same interface it enters.
Interface
|
Traffic Direction
|
Report displays...
|
Internal interface
|
Inbound
|
The devices on the LAN segment connected to the selected internal interface the most failed attempts to send information to outside devices.
|
Outbound
|
The outside devices with the most failed attempts to send information to devices on the LAN segment connected to the selected internal interface.
|
Inbound/
Outbound
|
The devices with the most failed communication attempts across the selected internal interface.
|
External interface
|
Inbound
|
The devices connected to the selected external interface with the most failed attempts to send information to devices on an internal LAN segment.
|
Outbound
|
The devices on internal LAN segments with the most failed attempts to send information to devices connected to the selected external interface.
|
Inbound/
Outbound
|
The devices with the most failed communication attempts across the selected external interface.
|
Linking to Flow Monitor reports from WhatsUp Gold
There are several ways to connect to the Flow Monitor Interface Details report from this WhatsUp Gold dashboard report.
- Click the interface name at the top of the dashboard report to view the Flow Monitor Interface Details report for the selected interface.
- Click an entry in the far left column of the dashboard report to view the Interface Details report for the selected interface. The entry that you click will be applied to the report as a keyword filter.
Configuring this dashboard report