Flow ID

A sequence number assigned to each unique flow identified by the Expert.

Name

The name of the application for the current flow

Client Addr

The address of the Client for the current flow.

Client Port

The port on which the Client or Client Addr was communicating in the current flow.

Client Country

Displays the client country. If the client country is not available, then Private Network, Multicast, or Unknown is displayed. See Special address ranges.

Client City

Displays the client city. If the client city is not available, then Private Network, Multicast, or Unknown is displayed. See Special address ranges.

Client Latitude

Displays the latitude of the client city.

Client Longitude

Displays the longitude of the client city.

Server Addr

The address of the Server or Server Addr for the current flow.

Server Port

The port on which the Server or Server Addr was communicating in the current flow.

Server Country

Displays the server country. If the server country is not available, then Private Network, Multicast, or Unknown is displayed. See Special address ranges.

Server City

Displays the server city. If the server city is not available, then Private Network, Multicast, or Unknown is displayed. See Special address ranges.

Server Latitude

Displays the latitude of the server city.

Server Longitude

Displays the longitude of the server city.

Flows

For a pair of nodes, shows the number of flows detected. (Hierarchical view only)

Events

Total number of events identified by the Expert EventFinder.

Protocol

The protocol under which the packets in this flow were exchanged.

Application

Displays the application associated with the flow.

Hops

Number of router hops between the server and the capture adapter.

Packets

The number of packets in the selected exchange. Note that packet totals are rolled up, such that higher levels of aggregations show totals for all sub-elements.

Client Pkts

The total number of packets sent from the Client or Client Addr in the current flow.

Server Pkts

The total number of packets sent from the Server or Server Addr in the current flow.

Bytes

The total bytes represented by the packets which were a part of the selected flow.

Client Bytes

The total bytes sent from the Client or Client Addr in the current flow.

Server Bytes

The total bytes sent from the Server or Server Addr in the current flow.

Start

The timestamp of the first packet in the current flow.

Finish

The timestamp of the final packet in the current flow.

Duration

The elapsed time, from the first to the last packet of the selected exchange, represented in the form Hours:Minutes:Seconds.decimal seconds. The precision is set in the Expert view options dialog.

3-Way Handshake

The time required for the TCP 3-way handshake (i.e., the time between the initial SYN sent from client to server, and the ACK which acknowledges the initial SYN/ACK from server to client).

% Wireless Retries

The number of 802.11 retry packets, as a percentage of all packets for this row.

Network Latency Turn Count

The number of pairs of packets used to calculate the value for network latency. Network latency is the time difference between a request packet and the first response packet.

Best Network Latency

The lowest observed network latency in the current flow or stream.

Avg Network Latency

For exchanges in which this parameter is relevant, shows the arithmetic average of all client/server network latencies for the selected pair of nodes.

Worst Network Latency

The longest observed network latency in the current flow.

Application Latency Turn Count

The number of pairs of packets used to calculate the value for application latency. Application latency is the time difference between a request packet and the first response packet with data, minus the network latency.

Best Application Latency

The lowest observed application latency in the current flow or stream.

Avg Application Latency

For exchanges in which this parameter is relevant, shows the arithmetic average of all client/server application latencies for the selected pair of nodes.

Worst Application Latency

The longest observed application latency in the current flow.

Response Time Turn Count

The number of pairs of packets used to calculate the value for response time. Response time is the time difference between a request packet and the first response packet with data.

Best Response Time

The lowest observed response time in the current flow or stream.

Avg Response Time

For exchanges in which this parameter is relevant, shows the arithmetic average of all client/server response times or of latencies for the selected pair of nodes.

Worst Response Time

The longest observed response time in the current flow.

C->S bps Turn Count

The number of packets sent from Client Addr to Server Addr, forming the basis for the throughput calculations for the current flow or conversation in this direction.

C->S bps Best

The largest observed throughput from Client Addr to Server Addr in the current flow.

C->S bps

The calculated simple average throughput (total throughput divided by total packets) for the traffic from Client Addr to Server Addr observed in the current flow.

C->S bps Worst

The smallest observed throughput from Client Addr to Server Addr in the current flow.

S->C bps Turn Count

The number of packets sent from Server Addr to Client Addr, forming the basis for the throughput calculations for the current flow in this direction.

S->C bps Best

The largest observed throughput from Server Addr to Client Addr in the current flow.

S->C bps

The calculated simple average throughput (total throughput divided by total packets) for the traffic from Server Addr to Client Addr observed in the current flow.

S->C bps Worst

The smallest observed throughput from Server Addr to Client Addr in the current flow.

TCP Status

For exchanges that represent TCP transactions, notes whether the session is Open or Closed.