238 Reporting
Querying flows
Viewing current flows
Note: SuperUsers, Administrators, and StandardUsers can view flow data;
RestrictedUsers cannot. See
about permissions.
View Current Flows enables you to search against all of the collected flows by
FlowChaser. These flows are stored in memory so they are not persistent.
To query current flows
1
In the Network Security console, click Flows > View Current Flows.
2
In Current Flow Data, select one of the following tabs:
Match Source and Destination: This will make a more focused query
■
on specific source and destination IPs.
Match Either Source or Destination: This will make a broader query on
■
either a source IP or a destination IP.
3
In Match Source and Destination, you can display flows that pertain only to
specific source IPs and destination IPs. To make this a more focused query,
enter data in the following fields:
Source IP: Numeric IP address
■
Prefix Len: Mask of the IP address in integers between 1 and 32
■
Port: Valid port number
■
Destination IP: Numeric IP address
■
Prefix Len: Mask of the IP address in integers between 1 and 32
■
Port: Valid port number
■
4
In Match Either Source or Destination, you can display flows that pertain
to either a source IP or a destination IP. To make this a broader query, enter
data in the following fields:
Source or Destination IP: Numeric IP address
■
Prefix Len: Mask of the IP address in integers between 1 and 32
■
Port: Valid port number
■
"User groups reference"
on page 319 for more