Viewing network packets statistics

To view blocked and passed thru packets on local system, click Log node in the program tree.

If you select a child node of a node representing a network interface you will be able to view statistics on packets processed by the given network interface; otherwise you get the stats on all packets processed by all network interfaces installed on the system.

Packet view window resembles a list with the following columns: Type, Source IP: Port, Destination IP: Port, Protocol, Num, Time First, Time Last and Reason.

The Type field can take one of the following values: incoming packet, outgoing packet or blocked packet.

Source and destination IP-addresses and ports values are extracted from network packet parameters.

Protocol field represents protocol used to deliver the packet.

Time First  and Time Last values are based on time when the very first or the very last packet of identical type was received from identical IP-address and port over the identical protocol.

Num value represents the total number of packets received from Time First to Time Last.

Reason represent the identifier of the rule that defines whether packets to block or to pass thru.

Important

The list of network packets is not updated automatically, so to update the information you should perform one of the following actions

• Click Log node on the program tree or the list of network packets and then press the Refresh button on Toolbar.
• Click Log node on the program tree or the list of network packets and then on the Action menu, click Refresh.
• Click Log node on the program tree or the list of network packets and then push F5 button on keyboard.

   

Note

• Types of packets to log can be set by specifying them on property pages for Log-type nodes that belong to a network interface. Use Action menu Start, Stop and Clear commands to start packet logging, stop packet logging or clear the list of packets window respectively.