
VMware, Inc. 65
12
FlowMonitoringisatrafficanalysistoolthatprovidesadetailedviewofthetrafficonyourvirtualnetwork
thatpassedthroughavShieldApp.TheFlowMonitoringoutputdefineswhichmachinesareexchangingdata
andoverwhichapplication.Thisdataincludesthenumberofsessions,packets,andbytestransmittedper
session.Sessiondetailsincludesources,destinations,directionofsessions,applications,andportsbeingused.
SessiondetailscanbeusedtocreateAppFirewallallowordenyrules.
YoucanuseFlowMonitoringasaforensictooltodetectrogueservicesandexamineoutboundsessions.
Thischapterincludesthefollowingtopics:
“UsingFlowMonitoring”onpage 65
“ViewaSpecificApplicationintheFlowMonitoringCharts”onpage 66
“ChangetheDateRangeoftheFlowMonitoringCharts”onpage 66
“ViewtheFlowMonitoringReport”onpage 66
“A d d anAppFirewallRulefromtheFlowMonitoringReport”onpage 67
“EditingPortMappings”onpage 68
Using Flow Monitoring
TheFlowMonitoringtabdisplaysthroughputstatisticsasreturnedbyavShieldApp.FlowMonitoring
displaystrafficstatisticsinthreecharts:
Sessions/hr:Totalnumberofsessionsperhour
ServerKBytes/hr:Numberofoutgoingkilobytesperhour
Client/hr:Numberofincomingkilobytesperhour
FlowMonitoringorganizesstatisticsbytheapplicationprotocolsusedinclient‐servercommunications,with
eachcolorinachartrepresentingadifferentapplicationprotocol.Thischartingmethodenablesyoutotrack
yourserverresourcesperapplication.
Trafficstatisticsdisplayallinspectedsessionswithinthetime
spanspecified.Thelastsevendaysofdataare
displayedbydefault.
Flow Monitoring
12
Comentarios a estos manuales