Observer Analyzer : Observer Analyzer : GigaStor Control Panel : Mining data from your GigaStor : Analyzing data with filters from the GigaStor Control Panel
Analyzing data with filters from the GigaStor Control Panel
You may want to filter the data that is shown on the Detail Graph. You can do so with the filters section of the GigaStor Control Panel. You can filter data from MAC Stations tab, IP Stations tab, IP Pairs tab, and more.
One example where you might use this is if you have strange traffic (perhaps a virus) on your network that you want to identify or isolate. By selecting a station from IP Stations tab and an application from the TCP Applications tab, you can select the “Combine tabs for detailed chart pre-filter” to generate a specific report. Using this report you can understand the general pattern of activity of the strange traffic so that you can conduct further analysis using packet decodes.
Note: If you are using the Ethernet Physical Port filter in conjunction with other filters, in the GigaStor Control Panel > Settings > General Options tab, you must enable the “Use physical port selections to filter statistics” option otherwise the combined filter will not work as you expect.
1. Select a time frame you want to analyze. See Selecting a time frame to analyze.
2. Click the Update Reports button to get the latest data from the time frame selected. This is unnecessary if you have “Auto-update GigaStor chart on statistics tab or selection change” in the GigaStor Settings. See Setting the GigaStor general options.
3. Click the IP Stations tab (or any statistics tab to the right of the Summary tab).
4. Select one or more stations. This creates and opens a GigaStor Control Panel filter.
Figure 67: GigaStor Control Panel filter
5. Click other tabs and choose what entries you want to add to your filter, such as an application from the TCP Applications tab. When selecting options from different tabs a filter is built, and it uses a logical AND to build it.
6. Click the Update Chart button. This refreshes the Detail Chart using the filter you built.
You have filtered data in the GigaStor Control Panel, which may suffice. You can also choose to further analyze the data. See Analyzing data by combining GigaStor Control Panel and Observer filters.