In addition to selecting to view traffic flowing through a specific switch and interface, you can also configure how end hosts are grouped in clusters, which elements in the chart are automatically labelled, and the traffic volume unit used to determine the top flows.
When end hosts are grouped in clusters, they are displayed as a circle of black squares, Currently, sFlowTrend-Pro supports end host clustering options:
- Subnets
-
The end hosts, which are responsible for the
top 100 flows, are grouped together according
to their subnet.
You must configure sFlowTrend-Pro with the subnets
in your network for the end hosts to be
clustered correctly (see
Section 13.3, “Configuring subnets in sFlowTrend-Pro
” ).
Any hosts with IP addresses that are not
contained within the configured subnets will
be displayed in a separate cluster named
External .
If the top flows are for L2 traffic
(for example L2 broadcasts, ARPs or
spanning tree) then the end hosts responsible
for these flows will be grouped in a separate
cluster named Non-IP.
- Country
- The end hosts, which are responsible for the top 100 flows, are grouped together according to the country in which the IP addresses of the end hosts are located. A host with an IP address, for which the country cannot be determined, will be displayed in a separate cluster named Unknown. If the top flows are for L2 traffic (for example L2 broadcasts, ARPs or spanning tree) then the end hosts responsible for these flows will be grouped in a separate cluster named Non-IP.
- Switch
- The end hosts, which are responsible for the top 100 flows, are grouped together according to the switch that they are most closely connected to. This allows you to understand traffic that stays within a switch and traffic that crosses multiple switches. A host which cannot be located to a switch, will be displayed in a separate cluster named Unknown.
The Label selector allows you to select how sFlowTrend-Pro should automatically label the elements in the chart. Elements that are automatically labelled will be labelled when the chart is loaded with the latest data. The following options are supported:
- No labels
- Labels will not be displayed automatically, however you can label selected end hosts or clusters by clicking on the corresponding element in the chart (see Section 7.4.1, “Selectively labelling chart elements”).
- Cluster
- Labels are displayed automatically for clusters.
- Top hosts
- Labels are displayed automatically for the end hosts which are responsible for the highest volume of traffic and are responsible for the largest number of flows.
- Clusters and flows
- Labels are displayed automatically for clusters and for the end hosts which are responsible for the highest volume of traffic and are responsible for the largest number of flows.
You can select which traffic volume units are used to determine the top 100 flows that are displayed in the chart. If you change the Units selector to Bits/s then the flows which contributed the highest volume of traffic in bits/s are displayed. If you change the Units selector to Bits/s then the flows which contributed the highest volume of traffic in frames/s are displayed.