Endpoint columns

The following table lists and describes the columns for endpoint views, including Physical Endpoint view, IP Endpoint view, ARP Attack view, Worm view, DoS Attacking view, DoS Attacked view, and TCP Port Scan view.

Column Description
Name The name of the node. The node may be MAC addresses, IP addresses, node groups or resolved names.
Bytes Total bytes sent and received by the node.
Packets The number of packets sent and received by the node.
Internal Bytes Only available for node group items. Total bytes transmitted inside the node group (See Node Group for more information).
Internal Packets Only available for node group items. Total packets transmitted inside the node group.
Broadcast Bytes Total broadcast bytes sent and received by the node.
Broadcast Packets Total broadcast packets sent and received by the node.
Multicast Bytes Total multicast bytes sent and received by the node.
Multicast Packets Total multicast packets sent and received by the node.
bps Bits per second.
Bytes/s Bytes per second.
Packets/s Packets per second.
Bytes In Received bytes.
Packets In Received packets.
Bytes Out Sent bytes.
Packets Out Sent packets.
Bytes Out/In (%) The ratio of sent bytes to received bytes.
Packets Out/In (%) The ratio of sent packets to received packets.
IP Count The number of IP addresses. Only available for node group items and MAC address items in the list.
Physical Conversation The number of physical conversations.
IP Conversation The number of IP conversations.
TCP Conversation The number of TCP conversations.
UDP Conversation The number of UDP conversations.
TCP SYN Sent The number of sent packets with SYN flag set to be 1.
TCP SYN Received The number of received packets with SYN flag set to be 1.
TCP SYNACK Sent The number of sent packets with ACK and SYN flags both set to be 1. The value of this item should be equal to that of TCP SYN Received for a normal TCP connection establishment.
TCP SYNACK Received The number of received packets with ACK and SYN flags both set to be 1. The value of this item should be equal to that of TCP SYN Sent for a normal TCP connection establishment.
Location Country or Area that the node belongs to.
TCP FIN Sent The number of sent packets with FIN flag set to be 1.
TCP FIN Received The number of received packets with FIN flag set to be 1. The value of this item should be equal to that of TCP FIN Sent for a normal TCP connection close.
TCP Reset Sent The number of sent packets with RST flag set to be 1.
TCP Reset Received The number of received packets with RST flag set to be 1.
Bytes% Percentage of total bytes sent and received by the node.
Packets% Percentage of packets sent and received by the node.
Internal Bytes% Percentage of bytes sent and received inside the node group.
Internal Packets% Percentage of packets sent and received inside the node group.
Broadcast Bytes% Percentage of broadcast bytes.
Broadcast Packets% Percentage of broadcast packets.
Multicast Bytes% Percentage of multicast bytes.
Multicast Packets% Percentage of multicast packets.
Bytes In% Percentage of received bytes.
Packets In% Percentage of received packets.
Bytes Out% Percentage of sent bytes.
Packets Out% Percentage of sent packets.
bps% Percentage of bits per second.
Bps% Percentage of bytes per second.
pps% Percentage of packets per second.
Broadcast packets/s Peak The peak value of broadcast packets per second.
Multicast packets/s Peak The peak value of multicast packets per second.
Bytes In/s Peak The peak value of bytes received per second.
Packets In/s Peak The peak value of packets received per second.
Bytes Out/s Peak The peak value of bytes sent per second.
Packets Out/s Peak The peak value of packets sent per second.
TCP SYN Sent/s Peak The peak value of packets with SYN flag set to be 1 sent per second.
TCP SYN Received/s Peak The peak value of packets with SYN flag set to be 1 received per second.

Back