Conversation columns

The following table lists and describes the columns of Conversation view, including Physical Conversation view, IP Conversation view, TCP Conversation view, UDP Conversation view, and Suspicious Conversation view.

Column	Description
Node 1 ->	The source address of the first packet in the conversation.
<- Node 2	The destination address of the first packet in the conversation.
Duration	Duration of the conversation, that is, from the timestamp of the first packet to the timestamp of the last packet in the conversation.
Bytes	Total bytes sent and received in this conversation.
Bytes ->	Bytes sent from node 1 to node 2.
<- Bytes	Bytes sent from node 2 to node 1.
Packets	The number of packets sent and received in this conversation.
Packets ->	The number of packets sent from node 1 to node 2.
<- Packets	The number of packets sent from node 2 to node 1.
Start Time	The timestamp of the first packet in the conversation.
Start Time ->	The timestamp of the first packet that is sent from node 1 to node 2.
<- Start Time	The timestamp of the first packet that is sent from node 2 to node 1.
End Time	The timestamp of the last packet in the conversation.
End Time ->	The timestamp of the last packet that is sent from node 1 to node 2.
<- End Time	The timestamp of the last packet that is sent from node 2 to node 1.
Protocol	The protocol for the conversation.

Back