User guide

Viewing Statistics
147
Proventia Network IPS G and GX Appliance User Guide
Viewing Statistics
Introduction Use the Statistics page to view the statistics of network traffic processed by the appliance.
You can use these statistics for testing purposes, troubleshooting, or some type of auditing
to discover network data and attack trends.
Viewing statistics To view the statistics:
1. On the Proventia Manager navigation pane, select Statistics.
2. Select one of the following statistics pages to view:
Types of driver
packets
The following table describes the driver packets:
Statistic Description
Protection Statistics Use the Protection Statistics page to view information about the
current appliance configuration and behavior that occurred as a
result of the configuration. This information includes statistics
about enabled event checks, as well as details about attack and
blocking actions the appliance has taken.
Packet Analysis Statistics Use the Packet Analysis Statistics page to view all the statistics
output by the Protocol Analysis Module (PAM). You can use this
information to track protocol counts and protocol processing.
Network Statistics Use the Network Statistics page to view network activity on each
adapter used on the appliance, as well as information about
packet counts (such as packets injected, rejected, or dropped), or
any unanalyzed packets that have passed through the network.
Unanalyzed packets can pass through when the appliance is
overloaded, or because of routine events such as policy “push”
through groups.
Packets Description
Received Packets The number of packets received since the adapter instance was
created.
Transmitted Packets The number of packets transmitted since the adapter instance was
created. This number includes packets forwarded, injected, or
unanalyzed.
Forwarded Packets The number of packets forwarded to a twinned or mirror interface
since the adapter instance was created. This number does not
include injected packets, but does include packets forwarded
without analysis.
Dropped Packets The number of packets not forwarded (dropped) since the adapter
instance was created. (Includes those dropped without analysis.)
Injected Packets The number of packets injected (i.e. transmitted packets
constructed by the application) since the adapter instance was
created.
Table 40: Driver packets