• Getting Started
• Tutorials
• Server
• Monitor
• Reports
• Queries
• Host
• Site Traffic
• Site Service
• AddressLocation
• AddressMap
• Events
• Event Counts
• Find Multi
• Interface Counters
• Interface Traffic
• Inventory
• Multi-Chart
• RRD
• WAN Traffic
• WAN Service
• Multi-Site
• Routing
• Security
• Support

Help : Queries

Web-based queries provide ad-hoc access to historical traffic data. A number of queries are accessible through forms. Additional information is available in the Querying traffic data tutorial.

Click on the Query button to access the following queries:

• Host Access data about a specified host.
• Site Traffic Access unidirectional hourly consolidated traffic matrix data.
• Site Service Access bi-directional hourly consolidated traffic matrix data.

Additional queries accessed by clicking on the Other link:

• Address Location Associate addresses with switch ports.
• Address Map Map layer 2 to layer 3 addresses.
• Events Obtain a list of recent events.
• Event Count Count events by type and/or location.
• Find Multi Find switch ports with multiple MAC or IP addresses connected to them.
• Interface Counters Access historical interface statistics.
• Interface Traffic Access minute by minute flow data for each interface.
• Inventory List all the switches and routers being monitored.
• Multi-Chart Create a page monitoring multiple switch ports.
• RRD Query Display RRD charts for a specific switch port.

In addition to using the forms, queries can be made by passing URL encoded parameters to the InMon Traffic Server.

For example, to find the top five clients of HTTP traffic, sorted by total bytes received.

/its/query/Traffic?tableType=TCP&sourcePort=80&resultSort=bytes&date=today
&resultTruncate=5&resultField=destinationAddress,bytes

Any tools capable of making http requests is then able to access traffic data. Suitable tools include:

• Perl
• wget
• Microsoft Excel

Tips: Use the form-based interface to make a query and then copy the resulting URL from the top of your browser. Use relative times like today or lastWeek in order to construct queries for periodic reports.