Enter a protocol pattern and click on the Submit button.
If more than one protocol matches the pattern then the matches will be listed. If a single match is found, details of the protocol will be displayed along with links providing additional information.
Click on the Servers button to see a real-time chart of the top servers for the selected protocol (see Traffic>Trend). Click on the Clients button to see a real-time chart of the top clients of the protocol (see Traffic>Trend). Click on the Connections button to see a real-time chart of the top connection using the selected protocol (see Traffic>Trend). Click on the Circles button to see a circles view showing the top connections (see Traffic>Circles).
Protocol search strings have the pattern,
<PROTOCOL>:<port>
The following protocols are recognized:
- ETHERNET
- ICMP
- IEEE802
- IP
- IPX
- RTP
- TCP
- UDP
- XNS
As well as explicitly providing a protocol and port, patterns can be used to search for protocols, for example:
- ETHERNET:2048
- TCP:ssh
- TCP:*shell*
- shell
- *shell*
- 80
The * symbol in a pattern matches any sequence of zero or more characters, for example the pattern router* would match: "router", "routers", "router123" etc. The ? symbol matches any single character, for example the pattern router? would match: "routers", "router1", "router2", but not "router" or "router12".