Differences

This shows you the differences between two versions of the page.

web_gui:network_status_page [2010/11/04 14:39]
tibor
web_gui:network_status_page [2010/11/19 11:09] (current)
tibor
Line 18: Line 18:
  * LAN interfaces are listed below the back side image of the unit.   * LAN interfaces are listed below the back side image of the unit.
  * Interfaces not listed have no active clients connected.   * Interfaces not listed have no active clients connected.
 +
The traffic bar for an interface shows ALL Ethernet traffic going through that interface (both send and receive), including broadcasts, multicasts, control packets, etc. The traffic bar for an interface shows ALL Ethernet traffic going through that interface (both send and receive), including broadcasts, multicasts, control packets, etc.
 +
 +Bridged interfaces are not shown. Hosts connected to a bridged interface show up under the bridged to interface.
 +
 +QoS classes of additional WAN interfaces are shown after their IP addresses.
==== Traffic bars ==== ==== Traffic bars ====
Line 25: Line 30:
**Length** of the bar indicates the amount of data trafic to/from the host. The data trafic is measured in BITS per second IP trafic (divide with 8 to get BYTES per second), and it is an average value of the traffic since the last refresh of the page. **Length** of the bar indicates the amount of data trafic to/from the host. The data trafic is measured in BITS per second IP trafic (divide with 8 to get BYTES per second), and it is an average value of the traffic since the last refresh of the page.
-**Thickness** of the bar indicates number of [[firewall:flows]] open to this host.+**Thickness** of the bar indicates number of [[firewall:flows]] open to this host. Data streams through the firewall consume flows. PC-s with many flows, requiring much firewall resources, have very thick traffic bars.
TIP: Klick "Refresh automatically..." to see the data trafic in real time. TIP: Klick "Refresh automatically..." to see the data trafic in real time.
Line 31: Line 36:
The scale of the bars is roughly logarithmic. The bigger the bar the higher the value – but a bar slightly larger than another can in fact have double the value. The scale of the bars is roughly logarithmic. The bigger the bar the higher the value – but a bar slightly larger than another can in fact have double the value.
-To see the true numerical values place the mouse pointer over the bars. To see resource usage in detail click on the host icon to open the Host info page.+To see the true numerical values place the mouse pointer over the bars. To see resource usage in detail click on the host icon to open the [[Host info]] page.
-Blue bar: nr of flows +==== Host icons ====
- +
-By default the SafeGate has 2000 flow s available for usage. Each data stream through the firewall consumes one of those flows. If you have for example 10 PCs connected to your SafeGate then each of them should open no more than 200 flows to ensure there are enough flows for all of your PCs. If a PC has as many flows open as its share then its blue bar is exactly half of the available space in size. +
- +
-Green bar: nr of bytes transferred +
- +
-During normal operations a flow is opened through the firewall, some data is transferred through it, and then it is closed again. Instead of displaying an ever-changing bytes-per-second value, the more stable bytes-transferred value is shown. The larger the green bar the more bytes have been transferred to/from the host through its currently open flows. +
- +
-If you for example have 10 PCs connected to your SafeGate and a total of 8000KB of data has been transferred, then each PC should have transferred an average of 800KB. If a PC has transferred more than that its green bar will be larger than half of the available space in size. +
- +
-==== Host icon ====+
The icon of the host indicates its online status: The icon of the host indicates its online status:
-Clicking on the Refresh… button makes the SafeGate send an ARP request to each connected host.+{{:web_gui:netstus.jpg|Network Status page }}   {{ :web_gui:setup_netstat.gif|Network map}}  
-PC A is answering to the ARP request, thus it is online (turned on). All online equipment answers to ARP requests, but ARP requests cannot get through gateways.+PC A has communicated lately, thus it is online (turned on). PC A is the PC you are sitting at, indicated by being slightly larger than the others.
-As soon as PC B tries to access the Internet it will automatically pop up on the Connected hosts list.+PC B too is known to be online (has been seen communicating). (All PC-s that communicate to or through the Internet Gate are listed in its ARP table. PC B is listed in the ARP table thus PC B has been communicating recently. Power off or excessive long time of no activity erases entries from the ARP table.)
-PC C is offline (turned off) – it does not respond to ARP requests. As response to ARP requests is mandatory, no response can only mean the PC is turned off, crashed or in some other way disabled – it is offline.+PC C on the other hand has not been communicating. There has been a PC at that IP address before, but we havn't seen from it lately. (PC C is not in the ARP table.) As response to ARP requests is mandatory, no response can only mean the PC is turned off, crashed or in some other way disabled – it is offline.
Gateways connect networks together: gateway D is connected to two subnets, and allows traffic to flow between them. Gateway D is online – it is itself answering to ARP requests. Gateways connect networks together: gateway D is connected to two subnets, and allows traffic to flow between them. Gateway D is online – it is itself answering to ARP requests.
Line 64: Line 59:
If a gateway itself is not responding to ARP requests then the gateway is offline – neither it, nor any PCs behind it can be reached. Thus as gateway H is offline, PCs J and K cannot be reached, even though they might be turned on. If a gateway itself is not responding to ARP requests then the gateway is offline – neither it, nor any PCs behind it can be reached. Thus as gateway H is offline, PCs J and K cannot be reached, even though they might be turned on.
-==== SIP icon ==== +GW 50.11.69.1 in the example picture above is the default gateway of your Internet provider. If it is offline you cannot reach the Internet. (In some PPPoA or PPPoE configurations the default gateway might be indicated offline even though it is online.)
-Hosts that SIP users are registered to have an additional SIP user icon next to them. The SIP user icon indicates that at least one SIP user is registered to that host. To see a list of which users are registered to that host, click on the host icon.+
-SIP media streams going to or from the host (at the moment the Network status page was opened) are indicated by a small telephone receiver appearing next to the SIP icon. Note that all kind of SIP media streams are indicated this way, not only voice streams.+Host 50.11.69.200 on the WAN is some equipment your Internet Gate has been communicating with that is on the same WAN subnet as you. It might be a DNS server, or your neighbours PC.
-=== Example ===+==== SIP icon ==== 
 +Hosts that SIP users are registered to have an additional SIP user icon next to them. The SIP user icon indicates that at least one SIP user is registered to that host. To see a list of which users are registered to that host, hover your mouse over the icon.
-Conclusions: +SIP media streams going to or from the host (at the moment the Network status page was refreshed) are indicated by a small telephone receiver appearing next to the SIP icon. Note that all kind of SIP media streams are indicated this way, not only voice streams.
- +
-  +
-gamma is using most flows – much more than its “share" +
-  +
-delta has transferred most bytes +
-  +
-beta has very little resource usage – perhaps just a ping or something minor like that. +
-NOTE! +
- +
-  +
-Just because a host uses more resources than its “share" it is no reason for alarm – hosts are allowed to use more resources than average for shorter or longer periods. It is only if you experience severe bandwidth problems you need to examine which hosts are using most firewall resources on your network.+
==== IP address ==== ==== IP address ====
-The IP address of the host. If the address is in italics it has been given by the DHCP server of your SafeGate.+The IP address of the host is shown next to the host icon. If the address is in //italics// it has been given by the DHCP server of your Internet Gate.
==== Hostname ==== ==== Hostname ====
-The primary DNS name of the host (the first name in the DNS database with that IP address). If you have entered several names for the same IP address in the DNS database only the first name will be displayed.+For hosts that either the DHCP or DNS servers, or the DNS cache knows a name the host name is also displayed. Only one, primary, host name is displayed even for hosts with multiple names. 
 + 
 +==== Detailed information ==== 
 +For detailed information about a host click on its icon and a [[host info]] page will appear.
===== New equipment ===== ===== New equipment =====
-If new equipment is connected to your network it will automatically pop up on the list as soon as it tries to connect to the Internet.+If new equipment is connected to your network it will automatically pop up on the list as soon as it requests an IP address or tries to connect to the Internet.
-If the equipment is using DHCP to collect an IP address, its name will also automatically appear on the page.+Equipment using static IP addresses usually appears without any name. To manually enter a name for it, click the "Local DNS Server" link and enter a DNS entry for the host.
-Equipment using static IP addresses appears without any name. To manually enter a name for it, click on that host's icon, and into the Hostname field of the appearing Host info page enter the desired name and click Save. +Equipment not connecting to the Internet might not appear automatically in the list. To manually add such equipment click the "Local DNS Server" link and enter a DNS entry for the host.
- +
-Equipment not connecting to the Internet might not appear automatically in the list. To manually add such equipment enter its IP address and hostname into the fields at the bottom of the Network status page and click Add .+
===== Advanced ===== ===== Advanced =====
 +{{ :web_gui:advanced_network_status.png?223|Advanced Network status in rel 5.30}}
 +
By clicking on the Advanced link at the bottom of the Network status page you will see the routing, ARP and DHCP tables in their raw format. By clicking on the Advanced link at the bottom of the Network status page you will see the routing, ARP and DHCP tables in their raw format.
web_gui/network_status_page.1288877968.txt.gz · Last modified: 2010/11/04 14:39 by tibor
CC Attribution-Noncommercial-Share Alike 3.0 Unported
www.chimeric.de Valid CSS Driven by DokuWiki do yourself a favour and use a real browser - get firefox!! Recent changes RSS feed Valid XHTML 1.0