6.9. Traffic reports

PNS can automatically create daily, weekly, and monthly statistics about the transmitted traffic, and send them to an administrator or auditor through e-mail. The reports are in Adobe Portable Document (PDF) format. Note that these reports do not provide detailed statistics about every host on your network, rather they can be used to identify the most active hosts ("top-talkers") and to examine trends and sudden changes in the statistics (outliers).

In general, every section of the report consists of a table that details the ten most active clients (for example, the ten clients who transferred the most data in a zone) and a pie chart that displays every client. Note that on the pie chart, only the clients responsible for at least ten percent of the total value are labeled, all other clients are aggregated under the Others label.

Note

Every PNS host, and every node of a PNS cluster creates and sends a separate report. Reporting options must be configured on every PNS host separately.

The reports include the following information:

  • Network Traffic: Traffic statistics for the entire network.

  • Zone Traffic: Traffic statistics for every zone defined in PNS. Note that this report can be long if there are many zones defined.

  • Mail Delivery Traffic: Statistics for the total transferred SMTP traffic, as well as for the most active accounts. Top senders and recipients are listed separately.

  • Spam and Virus Reports: Statistics about spam and infected e-mails.

  • Access Control Reports: Statistics about connection-attempts that were blocked by PNS.

  • URL Reports: List of websites generating more than a set amount of traffic, and a list of their top visitors. By default, ULR Reports are not included in the regular reports, see Procedure 6.9.1, Configuring PNS reporting for details on configuring them.

Warning

The reports are only sent to the e-mail address set in /etc/zorp/reports/options.conf, they are not stored locally on the PNS host.

Tip

To generate reports manually for arbitrary time periods, use the report.py command-line tool. Run report.py without parameters to display the available options and parameters of the application.

Previous Up Next
 Home