Hi, how to simply find internal IP up/downloading data?

[sitzler]

Hi,

Thanks for looking at my question, Scrutinizer is monitoring all of my interfaces, however I don't see the internal IP (or host-name) of the computer doing the "top talking".

For example when I do an upload test I can see my internet interface is monitoring (detecting) this under "Dashboard > Pairs". My internal proxy's IP is the Source (outbound) and the destination IP is whomever is receiving the file but I cant work how to tell its my ip address internal that has initiated the sending of this file? Can I "drill down" somehow to see my Internal IP as the source of the upload.

Any help appreciated, thanks

[dalet0]

Hi Sitzler,

1. I would identify the inbound or the outbound interface(s) for this traffic.
2. Open a conversation WKP report for that interface.
3. Apply a "IP Host" or a "Host to Host" filter. Here the host being the source or destination IP(s).

The following blog has more informations on how to use filters:
http://www.plixer.com/blog/network-traffic-analysis/advanced-netflow-analysis-requires-advanced-filters/

I hope this helps.