Darkstat IN/OUT perspective
-
Hey everyone,
For the darkstat package, im trying to understand the In | Out columns.
Is this from the perspective of the firewall? In other words, is Out meaning outbound traffic leaving the firewall?
The reason being, is i see the following
For row 2, does this mean there is more traffic leaving the network for 173.194.60.233 ? If so, that doesn't make sense considering that's a CDN.
So the way im reading this is that In - Inbound packets from IP. Out - outbound packets TO the IP address.
Darkstat just doesnt make a lot of sense to me.
Also what is the units? Is these bytes or bits? -
The In/Out values are in Bytes. If you compare them with the graphs page you can see the totals and those are marked in Bytes and packets.
Darkstat expects to be run on a server and presents data like that. So everything is seen as an external IP and IN is from that to the firewall.
So in your example it looks like that internal client has uploaded a lot to Google.Steve
-
@stephenw10 Ok I think i get it.
So for the following
Sorting by total which is the most amount of bytes sent and recieved {your top talker} whats being statedin the screenshot is that up until now , 192.168.14.65 sent around 4GB worth of traffic to the firewall and the firewall sent 100MB worth of traffic back to 192.168.14.56.
-
Yes, that's what it shows.
I don't use Darkstat personally beyond testing it's functionality.
