Our customer has a mid-size Network with Enterasys components S8 in the Core.
PurView, NAC-GW's and Netsight are Version 126.96.36.199. ALL ports from the S8 are policy based mirrored to the PurView Gateway.
Following, simple request:
"Show me with which devices the D2 Switch with IP 10.255.255.150 talks SNMP"
If I start a "Report" with "Network Activity for a Client", set the Client IP Address to 10.255.255.150 I can see there 4 Applications SNMP, NTP, ICMP and TFTP.
If I here click to "SNMP" I will see ALL mirror SNMP traffic but NOT the Device I searched for... (there are about 100 Switches within that LAN).
What is the best way to fullfill this request?