Network Endpoint
The Network Endpoint menu presents the communication observed by agents as a list from an endpoint perspective. Unlike the topology or trend charts, which show the flow and change of traffic, this menu is designed to let you check row by row which process on which server is communicating over which port. Use the Inbound Service Info screen for the listening perspective and the Outbound Connection Info screen for the connection perspective.
Both screens provide the same lookup time settings, column filters, search input, and CSV download. Only the column layout and the criteria that make up a row differ.
Inbound Service Info
You can check the processes and ports each server is listening on. Select the Network Endpoint > Inbound Service Info menu.
Each row represents a combination of an agent and a listen port, and the default sort is AgentName in ascending order.
| Column | Description |
|---|---|
AgentName | Name of the agent that collected the communication |
Process | Name of the process occupying the port. Java processes display the executable file path |
Process Command Line | Full execution command line of the process. Empty if not collected |
Listen Port | Local port number the process is listening on |
Outbound Connection Info
You can check the destination addresses and ports each server has connected to. Select the Network Endpoint > Outbound Connection Info menu.
Rows are deduplicated by the combination of agent, destination address, destination port, and protocol. The default sort is ascending by AgentName, Foreign IP Address, and Foreign Established Port, in that order.
| Column | Description |
|---|---|
AgentName | Name of the agent that initiated the connection |
Foreign IP Address | IP address of the connection destination |
Foreign Established Port | Port number of the connection destination |
Protocol | Protocol used for the communication |
Setting the lookup time
Set the lookup range in the time selection area at the top of the screen. The default is a live lookup covering the last 30 minutes, and the list refreshes every 60 seconds, the same as the data collection cycle.
When you stop the live lookup, refreshing stops and the lookup range at that moment is retained. To check the communication at a specific point in time, stop the live lookup and then specify the range you want.
Filtering the list
There are two ways to narrow down the data you have looked up.
-
Filter: Select a column in the filter area, then specify a condition and a value. The unique values gathered from the looked-up data are suggested as a list. Adding multiple filters applies an
andcondition, while specifying multiple values in a single filter applies anorcondition. -
Search: Enter a keyword in the search input box. Only rows with a matching string across all displayed columns remain.
The Total count is displayed above the table. When a filter or search reduces the results, the Filtered count is displayed alongside it.
Port columns are treated as numbers for sorting only. Filters and search treat every column as a string.
Downloading the looked-up data
To download the data displayed in the table as a CSV file, click the 
Download button. If a filter or search is applied, only the rows remaining on the screen are included in the file. When there are no rows to display, the button is disabled.
The file name follows the format {download time}_{project name}_inbound_service_info.csv or {download time}_{project name}_outbound_connection_info.csv.
If a cell value starts with =, +, -, or @, a single quotation mark is prepended to the value when saving so that spreadsheets do not evaluate it as a formula. Values that start with those characters, such as command lines, are displayed with a leading single quotation mark in the file.
Notes
-
This menu lists the communication actually observed during the lookup range, not the configuration state of the host. Servers or ports with no communication do not appear in the list.
-
Inbound Service Info excludes rows where both the process name and the execution command line are empty. In other words, a listen port whose process could not be identified is not displayed, even if communication was observed.
-
Column headers are displayed in English.