Flow Forensics Reports

Flow Forensics reports let you drill down to raw data flows and see a level of detail that is not available in other reports. You can jump to detailed information about any of the fields in a data packet for any monitored interface.
nfa1000
Flow Forensics reports let you drill down to raw data flows and see a level of detail that is not available in other reports. You can jump to detailed information about any of the fields in a data packet for any monitored interface.
You can run a Flow Forensics report to drill down and view raw flow data. The data is parsed into meaningful reports.
Use Flow Forensics to browse raw flow data for a specified time period. You can filter the results by using a number of fields. You can export the displayed data to a file in comma-separated value (CSV) format.
Flow Forensics reports let you report on all of the flow data that is collected in your environment. You can analyze every protocol, host, and conversation on your network. Other report types are designed to show the most active interfaces, protocols, hosts, and conversations or to show individual instances of these items.
Flow Forensics reports can provide a comprehensive analysis of all traffic for the following categories, for example:
  • Protocols that are active for one or more specified hosts
  • All protocols that are active on the network
  • All hosts that access one or more specified hosts
  • Volume of traffic to or from one or more specified hosts
 
More information: