Is it possible to report on all traffic hitting a server from an outside IP address

  • 1
  • Question
  • Updated 5 years ago
  • Answered
We have some external facing web servers and I want to find out how much bandwidth is associated with them for a given time. Only interested in traffic originating from external IP addresses as we want to use this reporting for billing purposes.

Thanks in advance
Photo of Network Admin

Network Admin

  • 32 Posts
  • 1 Reply Like

Posted 5 years ago

  • 1
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 392 Posts
  • 8 Reply Likes
You'll need to create a custom report for this.

Using the base report IP :: Traffic Distribution :: TCP report .

To edit the syntax that was used to generate this report you need to run the above report, then click More Actions on the report menu bar and save as a custom report.

Then view the custom report and click Edit, the code that was used to query the database and extract the results will be displayed.

Replace the report syntax with the syntax below:

Query ip [senid#Sensor#sensor], [proto#Protocol#protocol], [dport#Service#port], [sum(sent,rcvd)#Total#bytecnt] [percent(sent,rcvd)#Percent#percent] sort=-3 where proto=6 & {end#t#Time#date} & {senid#senid#Sensor#sensor} & {src#src#Source IP/Subnet#subnet} & {dst#dst#Destination IP/Subnet#subnet} & {dport#dport#Destination Port#service}
Graph bar z=3 y=1,2 x=0,1,2 title=Bytes
Link chart.png Traffic_breakdown /netmon/view.cgi?View=1&rid=45&t=$t&proto=$1&dport=$2&src=$src&dst=$dst&senid=$0 4