Trisul Traffic Meters

This page describes all the meters available out of the box in Trisul. Installing additional plugins will usually give you even more meters – which will be described in detail by the documentation accompanying each plugin.

To view open Customize → Counters → View Meters

Further reading Read the section on Traffic Monitoring for more.

What this list means ?Top

Trisul monitors 100+ traffic parameters in 16 different counter groups right out of the box.

Monitoring at all network layers
Traffic by L2,L3 protocols,MAC, MAC pairs, VLAN, IP, IPv6, Subnet, App, etc
Counting includes bytes, packets, connections, alerts
Optimized for long term storage without rollup
Toppers automatically tracked for most parameters. Configurable by user.

Use the table of contents on left to navigate this page

Special keys

SYS:GROUP_TOTALS: Each counter group has a special key named SYS:GROUP_TOTALS.
This meter represents the cumulative total of all keys in a given time interval.

AggregatesTop

Aggregate statistics
CGUID:{393B5EBC-AB41-4387-8F31-8077DB917336}

ID	Description	Type	Units
0	Total	VT_RATE_COUNTER	Bps
1	Packets	VT_RATE_COUNTER	pps
2	Active Sessions	VT_GAUGE	sess
3	Layer 2 Broadcast	VT_RATE_COUNTER	Bps
4	Layer 2 Multicast	VT_RATE_COUNTER	Bps
5	Layer 2 Unicast	VT_RATE_COUNTER	Bps
6	Layer 2 Broadcast	VT_RATE_COUNTER	Bps
7	Layer 2 Multicast	VT_RATE_COUNTER	Bps
8	Layer 2 Unicast	VT_RATE_COUNTER	Bps

Special Keys

The following keys are available in this group

Key	Description
TOTALBW	Total traffic seen
DIR_INCOMING	Incoming traffic – based on defined home network
DIR_OUTGOING	Outgoing traffic – based on defined home network
DIR_INTERNAL	Internal traffic – when both source and destination IPs in in home network
DIR_TRANSIT	Transit traffic – when neither source nor destination is in home network

Internal HostsTop

Hosts in HOME NETWORK
CGUID:{889900CC-0063-11A5-8380-FEBDBABBDBEA}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

External HostsTop

Hosts outside HOME NETWORK
CGUID:{00AA77BB-0063-11A5-8380-FEBDBABBDBEA}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

Web HostsTop

Hosts talking HTTP/HTTPS
CGUID:{EEF95297-0C8D-4673-AD6B-F4BD2345FD69}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

Email HostsTop

Hosts with Email traffic
CGUID:{22D4082E-B8BA-40D0-A287-1F524DF8DA7B}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

SSH HostsTop

Hosts with SSH traffic
CGUID:{439002E4-3758-4E88-9438-8034FE1616AF}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

Unusual Traffic HostsTop

Hosts with Unusual traffic
CGUID:{AE3A1449-5663-41A5-A028-FDE61DBB7EFA}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

Unleash AppsTop

Demo of Rule based counter group, count your enterprise apps
CGUID:{FF889910-9293-AAA5-0028-883991889884}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Security Alerts	10	VT_COUNTER	Alerts
2	Into Homenet	50	VT_RATE_COUNTER	Bps
3	Outof Homenet	50	VT_RATE_COUNTER	Bps
4	Connections	50	VT_GAUGE	Conns

HostsTop

Stats for each IP Host
CUID:{4CD742B1-C1CA-4708-BE78-0FCA2EB01A86}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

SubnetsTop

Stats for configured IP Subnets
CGUID:{429B65AD-CDA4-452E-A852-24D8A3D0FBB3}

ID	Description	Top Count	Type	Units
0	Total bits/sec	10	VT_RATE_COUNTER	Bps
1	Received bits/sec	0	VT_RATE_COUNTER	Bps
2	Transmit bits/sec	0	VT_RATE_COUNTER	Bps
3	Total pkts/sec	0	VT_RATE_COUNTER	pps

Dir MacTop

Traffic between two MACs
CGUID:{79F60A94-44BD-4C55-891A-77823D59161B}

ID	Description	Top Count	Type	Units
0	Total	10	VT_RATE_COUNTER	Bps
1	A→Z	0	VT_RATE_COUNTER	Bps
2	Z→A	0	VT_RATE_COUNTER	Bps

MacTop

Traffic per Ethernet MAC
CGUID:{4B09BD22-3B99-40FC-8215-94A430EA0A35}

ID	Description	Top Count	Type	Units
0	Transmit	20	VT_RATE_COUNTER	Bps
1	Receive	20	VT_RATE_COUNTER	Bps

AppsTop

Application wise traffic
CGUID:{C51B48D4-7876-479E-B0D9-BD9EFF03CE2E}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Security Alerts	10	VT_COUNTER	Alerts
2	Into Homenet	50	VT_RATE_COUNTER	Bps
3	Outof Homenet	50	VT_RATE_COUNTER	Bps
4	Connections	50	VT_GAUGE	Conns

InterfacesTop

Per interface statistics
CGUID:{8AC478BC-8891-0009-5F31-80774B010086}

ID	Description	Top Count	Type	Units
0	Total	10	VT_RATE_COUNTER	Bps
1	Packets	0	VT_RATE_COUNTER	pps

LinkLayerStatsTop

Breakdown of activity at link layer
CGUID:{9F5AD3A9-C74D-46D8-A8A8-DCDD773730BA}

ID	Description	Top Count	Type	Units
0	Total bytes/sec	10	VT_RATE_COUNTER	Bps
1	Total pkts/sec	0	VT_RATE_COUNTER	pps

NetworkLayerStatsTop

Breakdown of activity at network layer
CGUID:{E89BCD56-30AD-40F5-B1C8-8B7683F440BD}

ID	Description	Top Count	Type	Units
0	Total bytes/sec	10	VT_RATE_COUNTER	Bps
1	Total pkts/sec	0	VT_RATE_COUNTER	pps

VSATTop

Traffic per VSAT
CGUID:{A8776788-B8E3-4108-AD24-0E3927D9364B}

ID	Description	Top Count	Type	Units
0	Total	20	VT_RATE_COUNTER	Bps
1	Out-Route	20	VT_RATE_COUNTER	Bps
2	In-Route	20	VT_RATE_COUNTER	Bps
3	UDP down	15	VT_RATE_COUNTER	Bps
4	UDP up	15	VT_RATE_COUNTER	Bps
5	TCP down	15	VT_RATE_COUNTER	Bps
6	TCP up	15	VT_RATE_COUNTER	Bps
7	Mcast down	15	VT_RATE_COUNTER	Bps
8	Mcast up	15	VT_RATE_COUNTER	Bps
9	Others down	15	VT_RATE_COUNTER	Bps
10	Others up	15	VT_RATE_COUNTER	Bps

VLANStatsTop

Per VLAN Activity Monitor
CGUID:{0EC72E9E-3AD2-43FD-8173-74693EEA08D0}

ID	Description	Top Count	Type	Units
0	Total bytes/sec	20	VT_RATE_COUNTER	Bps

HostsIPv6Top

Stats for each IPv6 Host
CGUID:{6CD742B1-C1CA-4708-BE78-0FCA2EB01A86}

ID	Description	Top Count	Type	Units
0	Total	50	VT_RATE_COUNTER	Bps
1	Received	10	VT_RATE_COUNTER	Bps
2	Transmit	10	VT_RATE_COUNTER	Bps
3	Total	0	VT_RATE_COUNTER	pps
4	Active TCP Conns	50	VT_COUNTER	conns
5	Attacker alerts	10	VT_GAUGE	alerts
6	Homenet	20	VT_RATE_COUNTER	Bps
7	External	20	VT_RATE_COUNTER	Bps
8	TCP SYN sent	10	VT_GAUGE	packets
9	TCP SYN recv	10	VT_GAUGE	packets
10	TCP SYNACK sent	10	VT_GAUGE	packets
11	TCP RSTFIN sent	0	VT_GAUGE	packets
12	Victim alerts	10	VT_GAUGE	alerts

Meta Counter GroupTop

Second order stats for counters
CGUID:{4D88CC23-2883-4DEA-A313-A23B60FE8BDA}

ID	Description	Type	Units
0	Master Size	VT_GAUGE	i
1	MRU Size	VT_GAUGE	i
2	Pending KU Size	VT_GAUGE	i
3	Flush US	VT_GAUGE	i
4	Flush Keys	VT_GAUGE	i
5	New Keys	VT_GAUGE	i
6	Key Hits	VT_GAUGE	i
7	Unflushed Keys	VT_GAUGE	i
8	Heap mem	VT_GAUGE	i
9	Tail Prunes	VT_GAUGE	i
10	Hi Water Rej	VT_GAUGE	i

Meta Session GroupTop

Second order stats for flow activity
Used to monitor flow setup, teardown, expiry activity in detail.
CGUID:{594606BD-EEB2-4E0B-BAC4-84B7057088C8}

ID	Description	Type	Units
0	Master Size	VT_GAUGE	i
1	MRU Size	VT_GAUGE	i
2	New	VT_GAUGE	i
3	Closed	VT_GAUGE	i
4	Expired	VT_GAUGE	i
5	Terminated	VT_GAUGE	i
6	Flushed	VT_GAUGE	i
7	FlushedActive	VT_GAUGE	i
8	Key Hits	VT_GAUGE	i
9	Heap mem	VT_GAUGE	i
10	Tail Prunes	VT_GAUGE	i
11	Hi Water Rej	VT_GAUGE	i
12	After Term	VT_GAUGE	i
13	Flush USecs	VT_GAUGE	i

Special Keys

The following keys are available

Key	Description
{99A78737-4B41-4387-8F31-8077DB917336}	Meters for TCP/UDP flows

Alert SignaturesTop

Individual Alert Signatures
CGUID:{A0FA9464-B496-4A20-A9AB-4D2D09AFF902}

ID	Description	Top Count	Type	Units
0	Total Alerts	20	VT_GAUGE	Count

Alert ClassesTop

IDS Alert Classfication
CGUID:{20BC4345-37F0-44D0-ABFF-3BED97363CB1}

ID	Description	Top Count	Type	Units
0	Total Alerts	20	VT_GAUGE	Count

FlowGensTop

Flow generator traffic
CGUID:{2314BB8E-2BCC-4B86-8AA2-677E5554C0FE}

ID	Description	Top Count	Type	Units
0	Total Bytes/sec	10	VT_RATE_COUNTER	Bps
1	Total Flow Bytes/sec	10	VT_RATE_COUNTER	Bps
2	Flow Records/sec	0	VT_RATE_COUNTER	Rps

FlowIntfs ActiveTop

Flow interface traffic
CGUID{C0B04CA7-95FA-44EF-8475-3835F3314761}

ID	Description	Top Count	Type	Units
0	Bytes/sec Recv	10	VT_RATE_COUNTER	Bps
1	Bytes/sec Xmit	10	VT_RATE_COUNTER	Bps

HTTP HostsTop

Traffic by HTTP Host Headers
CGUID:{D2AAD7C6-E129-4366-A2AD-A8CB9AA4C2F4}

ID	Description	Top Count	Type	Units
0	Total Traffic	50	VT_RATE_COUNTER	Bps

HTTP Content TypesTop

Traffic by HTTP Content Types
CGUID:{C0C9757F-2005-4CC5-BB96-D72F607E6188}

ID	Description	Top Count	Type	Units
0	Total Traffic	20	VT_RATE_COUNTER	Bps

Trisul Network Analytics

Contents

Trisul Traffic Meters

What this list means ?Top

Special keys

AggregatesTop

Special Keys

Internal HostsTop

External HostsTop

Web HostsTop

Email HostsTop

SSH HostsTop

Unusual Traffic HostsTop

Unleash AppsTop

HostsTop

SubnetsTop

Dir MacTop

MacTop

AppsTop

InterfacesTop

LinkLayerStatsTop

NetworkLayerStatsTop

VSATTop

VLANStatsTop

HostsIPv6Top

Meta Counter GroupTop

Meta Session GroupTop

Special Keys

Alert SignaturesTop

Alert ClassesTop

FlowGensTop

FlowIntfs ActiveTop

HTTP HostsTop

HTTP Content TypesTop

Resources

New on Blog

Need help ?