Skip to main content

Protocol Analysis & Socket Analysis

Protocol Analysis​

Protocol Analysis provides TCP flag behavior and ICMP message type breakdown.

Protocol Distribution​

Horizontal progress bars showing the percentage of traffic accounted for by TCP, UDP, ICMP, and Other protocols.

TCP Flag Analysis​

A table showing the count of packets with each TCP flag set:

FlagDescription
SYNConnection initiation
SYN-ACKServer acknowledgment of a new connection
RSTConnection reset
FINNormal connection teardown
ACKAcknowledgment

ICMP Analysis​

A table breaking down ICMP message types:

Type
Echo Request
Echo Reply
Dest Unreachable
TTL Exceeded

Socket Analysis​

Socket Analysis tracks TCP and UDP connection states across all monitored devices.

Summary Cards​

CardDescription
Total ConnectionsTotal count of tracked TCP/UDP sockets across all devices
EstablishedConnections currently in ESTABLISHED state
ListeningPorts actively listening for incoming connections
TIME_WAITConnections in the TCP TIME_WAIT state

Connection State Distribution​

A donut chart showing the breakdown of all connections by TCP state (ESTABLISHED, CLOSE_WAIT, TIME_WAIT, LISTEN, SYN_SENT, FIN_WAIT).

Connections Over Time (24h)​

A time-series line chart showing the total connection count over the last 24 hours.

Top Local Ports​

A ranked list of the most-used local ports across all devices.

Top Remote IPs​

A ranked list of remote IP addresses with the most active connections to your devices.

  • Network Flows — Flow-level traffic analysis and top applications
  • Security — Security events correlated with traffic anomalies
  • Traffic — Per-device bandwidth and traffic trends