4.3 Network Traffic Statistics

By analyzing network traffic, administrators can quickly identify issues such as network congestion and take appropriate measures. Network traffic statistics include detailed information such as the network addresses of both communication parties, ports, and traffic volume, helping network administrators monitor usage and troubleshoot problems.

Select Menu → Statistics → Network Traffic to view network traffic usage.

Function Button Description

Icon Button	Description
	Mode button, allowing administrators to select the network traffic statistics mode;
	Direction button, including three traffic directions: total, sent, and received;
	Expand button, effective when statistics are by computer, allows expanding computers within subgroups;
	Display Top Items, defines the number of entries shown in the statistics list, including All, Top 10, Top 20, or Custom. When expanding columns by website category, the Top Items icon is grayed out.

Statistics Criteria

Network Traffic Statistics can be divided into six modes:

By Address Detail

Statistics by address detail calculate the data traffic for all IP addresses and ports. From the results, administrators can identify which counterpart IP addresses have the highest communication traffic with the client machine within a specific time period, helping to understand the network behavior of that client.

The statistics include the network address and the traffic exchanged with that IP address.

In practice, administrators can set appropriate address and port ranges according to management requirements to obtain the desired network traffic statistics and charts.

By Port Detail

Statistics by port detail calculate the traffic data for a specified port range across a range of counterpart IP addresses. From the results, administrators can identify which ports on the client machine have higher traffic. If excessive traffic is detected on unauthorized ports, immediate measures can be taken to close those ports.

The statistics include port details and all traffic on each port.

In practice, administrators can set appropriate address and port ranges according to management requirements to generate the desired network traffic statistics and charts.

By Address Category

Statistics by address category calculate traffic on specified network ports based on the classification of network addresses. By default, the system tracks traffic for TCP and UDP protocols, and communication addresses are categorized as Enterprise Network or Internet. Administrators can select other categories in the address range and port range fields in the query panel for customized statistics.

This mode allows administrators to analyze and compare traffic across different network address ranges from a macro perspective for a computer or computer group.

By Port Category

Statistics by port category calculate traffic on specified network addresses based on the classification of network ports. By default, the system tracks TCP and UDP protocol traffic for communication addresses within the Enterprise Network and Internet. Administrators can select other categories in the address range and port range fields in the query panel.

This mode enables administrators to analyze and compare traffic across different network port ranges for a computer or computer group.

By Computer and Address Category

Statistics by computer and address category calculate traffic for a computer or computer group within specified network address ranges. This mode allows administrators to quickly analyze and compare traffic differences between computers or groups in the selected address range.

When analyzing a computer group, clicking the Expand button will show all computers within the group, allowing a comparison of traffic among group members.

Administrators can adjust the query and address ranges in the query panel to obtain meaningful traffic statistics.

By Computer and Port Category

Statistics by computer and port category calculate traffic for a computer or computer group within specified port ranges. This mode enables administrators to quickly analyze and compare traffic differences between computers or groups on selected ports.

When analyzing a computer group, clicking the Expand button will show all computers in the group, allowing a comparison of traffic among group members.