Traffic queries against the consolidated hourly data are made using the URL /its/query/Service. The following arguments are recognized:

The Service Query differs from the Traffic Query in that it deals with bi-directional flows. The combination of one or more elements of serverAddress, serverPort, clientAddress and clientPort determines the direction of a client/server interaction. The servers and clients can be extracted using serverAddress and clientAddress resultField values. Aggregate byte and frame counts as well as counts into and out of the server can be extracted using the appropriate resultField values.