Top Conversations Between Cities
Top Conversations Between Cities report reveals traffic between locations (cities). This report is tailored to highlight traffic to/from remote sites. By default, this report shows a list of the top n conversations, each for a given source/destination city pair.
: In some cases traffic displayed in graphical form will only appear as coming from one direction. This is because the traffic in the other direction was not large enough to be given a ranking in the Top N list. To see opposite direction traffic in this case, you can increase the length of the Top N list (increase N).
Understanding location data
Public IP addresses. For public IPs (such as IP addresses outside your firewall, LAN, or enterprise boundaries) by default Network Traffic Analyzer uses the location data provided by regional internet registries (RIRs), which is built into WhatsUp Gold for the source and destination addresses. Typically, the location is a metropolitan area region, such as a town. You can also associate ranges of IP addresses with a location using the NTA IP Groups Library.
Private IP addresses. For IP addresses inside your firewall beginning with 10.x.x.x or 192.168.x.x, it is best practice to associate location information with an IP Group using the NTA IP Groups Library.
- . Locations of source and destination cities (Source Location —> Destination Location).
- . Field composed of source with, State, and Country identifiers included.
- . Field composed of destination with, State, and Country identifiers included.
- . Combined (incoming/outgoing) number of bytes transferred. (Use Report Settings
option to rank the list by packet or flow count, not bytes.) - . Total average bit rate.
- . Percentage of overall traffic.
To display Flow and Packet measurements, click a column heading (
) for column selection list (
). You can also include:
- . City where network traffic originates from.
- . Metropolitan region or subdivision of the sender city.
- . Country of the sender city.
- . Degrees latitude of the sender city.
- . Degrees longitude of the sender city.
- . Destination for network traffic.
More...
- . Metropolitan region or subdivision of the destination city.
- . Country of the destination city.
- . Degrees latitude of the destination city.
- . Degrees longitude of the destination city.
- . The total number of packets sent/received for the current city and the selected date range.
- . The average packet rate for the current city, in packets per second (pps), for the selected date range.
- . Percentage of sent/received packets for the current conversation.
- . Flows received from the Flow Sources (switch or router NetFlow observation points) for the current conversation.
- . The average flow rate generated for the current conversation, in multiples of flows per second (fps) for the selected date range.
- . Percentage of received flows for the current conversation.
- . Fraction of total bandwidth capacity used. "N/A" denotes the measurement cannot be calculated because the bandwidth capability is unknown for the current interface.
Generate a report
. 
, 
Choose a networking device or single physical or virtual interface you want to see Top Conversations Between Cities measurements for. Choose traffic direction across an interface.
Use the Select Device dialog for one of the following:
Control
|
Description
|
Device.
|
Browse and choose a networking device that is a Network Traffic Analyzer monitoring source. (For example, wireless router, router, and more)
|
Network Interface.
|
- Choose a single physical or virtual interface Network Traffic Analyzer you want traffic statistics for.
- Choose direction of traffic over the network interface (, , , or for invalid traffic.).
|
Network. 
|
Network devices known to NTA.
|
. 
Choose times for the Top Conversations Between Cities. (Subject to NTA collection interval and retention policies.)
Choose time constraints for your NTA data view
Date Range . Choose or define an overall window of time network activity data.
: Detail rendered in graphs depends on the time window you choose (Date Range) along with how long your system retains raw, hourly, and daily time-series data (NTA data collection and Data Retention settings). NTA graphs network activity as time-series averaged over daily intervals, hourly intervals, or over shorter periods (raw). Raw data interval is defined by the data collection interval in NTA settings.
: If you choose a time window outside of your NTA default data retention limits (8 hours for Raw and 10 days for Hourly, for example) your graph will default to an interval detail of Daily.
Detail Revealed with Default Retention Settings
Over time, the NTA collector cleans up older data. Eventually, collected data is combined into daily totals at the rates shown in the following table. If your site's mission and database capacity allow for more detailed data be retained for longer periods, increase the default retention settings in the NTA Settings dialog ( menu ).
Report Time Window Selection
|
Data Interval Shown in Graph (default retention settings)
|
Example
|
0 – 7 hours
|
Raw
- Data interval = every two minutes.
- Default data retention = 7 hours plus the current fraction of an hour (unless extended in NTA Settings).
|
Top Applications observed over the last 30 minutes (raw)
|
more than 8 hours within the past 9 days
|
Hourly
- Data interval = every hour.
- Default data retention = 9 days plus the current fraction of a day (unless extended in NTA Settings).
|
Top Senders over the last day (hourly)
|
10 days or more
|
Daily
Data interval = every 24 hours.
Daily is also the Archive data interval.
|
Top Protocols over the last 10 days (daily)
|
. Choose and hide columns, reorder columns, and apply advanced filters 
to customize your data view.
Filter and pick by column
Click a report heading () and use the "column picker" () from the drop down list.
Control
|
Purpose
|
Columns.
|
Click a check box to display the column. Clear the check box to hide it.
|
Move Column.
|
Click on a column heading and drag it to reorder your table's columns.
|
Advanced Filtering.
|
Apply category, pattern, and keyword filtering to column data.
|
. Fine tune report presentation and range of values displayed using the Report Settings dialog (optional).
Specify threshold and top n:
Control
|
Purpose
|
Show Top n Items
|
Limit items to the samples with the highest (or lowest) interface errors.
|
Threshold Type
|
Switch between minimum or maximum mode for cutoff values for the ranked list.
- At or Over. Show peak occurrence period. (Observations equal to or greater than Threshold.)
- At or Under. Show occurrences equal to or less than Threshold.
|
Threshold (percent)
|
Baseline value used to trim ranked device list based on peak or subpeak periods when returning the Top n.
|
Chart and visualize data over time (single device 
)
Charting and visualization is available when you select a single device.
Control
|
Purpose
|
Display Options
|
Present data as a chart, a table grid, or both.
|
Chart Type
|
- Gauge charts. Available when you select a Date Range of .
- Time series. Available when you select a Date Range interval (, for example).
- Line/Area. Scatter graph that connects adjacent measurements with straight lines.
- Spline/Area Spline. Choose a graph with a smoothed appearance where adjacent samples exhibit a gradual slope.
|
Chart Options
|
- Legend, Grid Lines, Range Selector. Include legend, grid lines, and range selector for readability.
- Trend Lines. Present data with a smoothed average to show trend.
- Vertical Axis Scale. Automatically scale to fit data or specify a finite range.
|
: Trend lines represent a moving average that can be compared with line and area graphs to reveal peak and sub peak intervals, collision periods, and indicate transmission problems.
Share, export, and save as PDF
Most generated Top Conversations Between Cities report data can be printed, shared, and exported when selecting (
) from the Dashboard Options (
) menu. After the report has been expanded, select export (
) to access the following options:
Network Traffic