Top Receivers with the Most Failed Connections
Top Receivers with the Most Failed Connections report reveals devices that initiated the highest number of unsuccessful TCP connection attempts, or SYN packets.
Unsuccessful connections (incomplete TCP handshakes) can imply port scanning, penetration testing, and methods used by security testers or hackers to find potential intrusion points on a network. Large numbers of these half-open or incomplete connections can also denote an attempt at a denial of service (DoS) attack.
- . Host name of the top receiver with the most failed connections.
- . Number of failed connection attempts.
- . Total average packet rate.
- . Percentage of top n items ranked.
Several report columns do not appear by default and can be configured to display in this report. You can display the following additional report columns:
- . Receiver's IP address.
- . Receiver's hostname.
: To show reports in full screen with most if not all possible columns, click on report options ( ) menu and choose ().
Generate a report
. , Choose a networking device or single physical or virtual interface you want to see Top Receivers with the Most Failed Connections measurements for. Choose traffic direction across an interface.
Use the Select Device dialog for one of the following:
Control
|
Description
|
Device.
|
Browse and choose a networking device that is a Network Traffic Analysis monitoring source.
|
Network Interface.
|
- Choose a single physical or virtual interface Network Traffic Analysis you want traffic statistics for.
- Choose direction of traffic over the network interface (, , , or for invalid traffic.).
|
. Choose times for the Top Receivers with the Most Failed Connections.
Choose time constraints for data view
Control
|
Purpose
|
Date Range
|
Choose or define an overall date range.
|
Business hours
|
- Focus on specific days of the week and periods within each day.
- Reveal trends that are sensitive to business hours, time zones, and other periodic attributes in the observed data.
|
. Choose and hide columns, reorder columns, and apply advanced filters to customize your data view.
Filter and pick by column
Click a report heading () and use the "column picker" () from the drop down list.
Control
|
Purpose
|
Columns.
|
Click a check box to display the column. Clear the check box to hide it.
|
Move Column.
|
Click on a column heading and drag it to reorder your table's columns.
|
Advanced Filtering.
|
Apply category, pattern, and keyword filtering to column data.
|
. Fine tune report presentation and range of values displayed using the Report Settings dialog (optional).
Specify threshold and top n:
Control
|
Purpose
|
Show Top n Items
|
Limit items to the samples with the highest values.
|
Sort by Field
|
Select a column to sort by (if applicable).
|
Chart and view options
Control
|
Purpose
|
View Options
|
Select/clear the checkboxes to display/hide
- Totals. Display totals for each column.
- Others. Remainder values that do not make the top n.
- Chart. Display the selected Chart Type
- Legend. Include legend and grid lines for readability.
- Trend Lines. Present data a smoothed average to show trend.
|
Chart Type
|
Select a chart type and associated options:
- Pie. Pie distribution chart.
- Line/Area. Scatter graph that connects adjacent measurements with straight lines.
- Spline/Area Spline. Choose a graph with a smoothed appearance where adjacent samples exhibit a gradual slope.
- Vertical Bar/Horizontal Bar. Vertical or horizontal bar chart/histogram.
|
Y-Axis Scale
|
Scale Y-axis (chart and graph height) automatically or choose a fixed size.
|
Share, export, and save as PDF
Most generated Top Receivers with the Most Failed Connections report data can be printed, shared, and exported when selecting () from the Dashboard Options () menu. After the report has been expanded, select export () to access the following options: