Skip to main content

Traffic Analysis

The Traffic Analysis page provides a real-time view of network traffic across your edge fleet. It combines bandwidth metrics, IPFIX flow data, and per-edge breakdowns to help you understand traffic patterns and identify anomalies.

Navigate to Analytics > Traffic Analysis in the sidebar.

Summary Cards

Four cards at the top provide a high-level overview:

CardDescription
Total TrafficAggregate data transferred (GB) across all edges in the selected time range
Avg Daily TrafficAverage daily throughput
Peak BandwidthHighest observed bandwidth (Mbps) across any edge
Edge DevicesNumber of edges reporting metrics

An area chart showing download and upload bandwidth (Mbps) over time. Use the time range selector to adjust the view:

RangeDescription
1hLast hour (1-minute resolution)
6hLast 6 hours
24hLast 24 hours
7dLast 7 days

The chart auto-refreshes every 60 seconds.

IPFIX Flow Analysis

When edges have IPFIX/flowprobe enabled, additional flow analysis sections appear:

Protocol Distribution

A donut chart showing traffic breakdown by IP protocol (TCP, UDP, ICMP, etc.) based on IPFIX flow data.

Top Services by Port

A horizontal bar chart showing the top destination ports by traffic volume. Common services are labeled (e.g., HTTPS/443, DNS/53, SSH/22).

Service Traffic Details

A table showing per-service breakdowns:

ColumnDescription
ServiceDestination port and protocol
TrafficTotal bytes with a visual progress bar
PercentageShare of total traffic
info

IPFIX flow analysis requires flowprobe to be enabled on edge interfaces. If no flow data is available, these sections are hidden. Configure flow export on the Edge Configuration page.

Traffic by Edge Device

A bar chart showing total traffic (download + upload) for the top 10 edge devices.

Edge Device Traffic Summary

A searchable table listing all edges with their traffic metrics:

ColumnDescription
Edge NameDevice name
DownloadTotal received bytes
UploadTotal transmitted bytes
Avg BandwidthAverage bandwidth utilization

Use the Hide edges with no traffic checkbox to filter out inactive devices.

Active Alerts

Displays any active traffic-related alerts from the alerting system (VictoriaMetrics + alertmanager). Each alert shows the alert name, severity, affected edge, and duration.