purview: report how to show bidirectional traffic

[Rainer_Adam]

Our customer has a mid-size Network with Enterasys components S8 in the Core.

PurView, NAC-GW's and Netsight are Version 6.1.0.182. ALL ports from the S8 are policy based mirrored to the PurView Gateway.

Following, simple request:

"Show me with which devices the D2 Switch with IP 10.255.255.150 talks SNMP"

If I start a "Report" with "Network Activity for a Client", set the Client IP Address to 10.255.255.150 I can see there 4 Applications SNMP, NTP, ICMP and TFTP.

If I here click to "SNMP" I will see ALL mirror SNMP traffic but NOT the Device I searched for... (there are about 100 Switches within that LAN).

What is the best way to fullfill this request?

[Rainer_Adam]

YES, thanks again Mike for support.

It is very simple (if you know it 😉 ) Go to "Application" and there to "Application flows" on the right side you can see the "search" line. This is NOT simply a text field to search for, I REALLY recommend you to click to the help text and to "more" within there....

[Mike_Thomas]

Rainer and I resolved this in the case.

[Ryan_Mathews]

Nice job Mike!

https://gtacknowledge.extremenetworks.com/articles/Q_A/Reviewing-Oneview-Pureview-output-for-SNMP-ap...

[Rainer_Adam]

Extreme Networks GTAC Case # (01127878)