Entities

The Entities tab shows all individual entities on the network–both user-defined and discovered–and sorts them into separate subtabs to streamline searching and inspection. Entities also link directly to a detailed summary pages, which contain activity timelines, statistics, and shortcuts to run Reports.

The following subsections explain the contents of each subtab as well as any additional functions under it:

Hint

The gear button opens a quick-access tray with global settings for the Entities tab and an options to export the data as a CSV or PDF file and refresh the page. The filter button opens a separate tray with filtering options for the entity lists.

Usernames

The Usernames subtab displays all username-host pairs along with the following details:

  • Data source

  • Machine name (if available)

  • First seen timestamp

  • Last seen timestamp

Clicking on either a host address or username will open a summary page for that entity.

Applications Defined

The Applications Defined subtab shows all defined applications communicating on the network along with the following details:

  • Port number

  • Number of Exporters using the application

  • Number of flows sent by the application

  • Packet rate

  • Bit rate

A link to the admin page for adding/defining applications can also be accessed from the Applications Defined subtab.

Hosts

The Hosts subtab shows all discovered hosts and can be set to list only sources, only destinations, or source-destination pairs.

The following details are also included in the table, regardless of the selected view:

  • Number of Exporters

  • Number of flows

  • Packet rate

  • Bit rate

By default, the host summary page is opened on the tab corresponding to the specified role (e.g., destination tab when clicking on the host as a destination), but the other tabs remain accessible from the same page.

Autonomous Systems

The Autonomous Systems subtab lists all autonomous systems (ASs) sending or receiving packets through the network. The list can be set to show only sources, only destinations, or source-destination pairs.

The table also includes the following details for each AS listed:

  • Number of Exporters

  • Number of flows

  • Packet rate

  • Bit rate

By default, the host summary page is opened on the tab corresponding to the specified role (e.g., destination tab when clicking on the AS as a destination).

IP Groups

The IP Groups subtab lists all IP Groups configured under the Plixer Scrutinizer environment and can be set to show only sources, only destinations, or source-destination pairs.

The table also includes the following details for each IP Group listed:

  • Number of Exporters

  • Number of flows

  • Packet rate

  • Bit rate

By default, the IP Group summary page is opened on the tab corresponding to the specified role (e.g., destination tab when clicking on the IP Group as a destination).

Countries

The Countries subtab shows all countries discovered on the network and can be set to display only sources, only destinations, or source-destination pairs.

The table also includes the following details for each country listed:

  • Number of Exporters

  • Number of flows

  • Packet rate

  • Bit rate

Note

The UNKNOWN listing and all details provided for it includes all country entities that the system was unable to identify.

By default, the country summary page is opened on the tab corresponding to the specified role (e.g., destination tab when clicking on the country as a destination).

Protocols

The Protocols subtab shows all communication protocols being used by devices on the network.

The table also includes the following details for each protocol listed:

  • Number of Exporters

  • Number of flows

  • Packet rate

  • Bit rate

Links to the admin pages for whitelisting protocols and defining exclusions can also be accessed from the Protocols subtab.