Symantec 10521146 Administration Guide - Page 238

238 Reporting Querying flows Note: SuperUsers, Administrators, and StandardUsers can view flow data; RestrictedUsers cannot. See "User groups reference" on page 319 for more about permissions. Viewing current flows View Current Flows enables you to search against all of the collected flows by FlowChaser. These flows are stored in memory so they are not persistent. To query current flows 1 In the Network Security console, click Flows > View Current Flows. 2 In Current Flow Data, select one of the following tabs: ■ Match Source and Destination: This will make a more focused query on specific source and destination IPs. ■ Match Either Source or Destination: This will make a broader query on either a source IP or a destination IP. 3 In Match Source and Destination, you can display flows that pertain only to specific source IPs and destination IPs. To make this a more focused query, enter data in the following fields: ■ Source IP: Numeric IP address ■ Prefix Len: Mask of the IP address in integers between 1 and 32 ■ Port: Valid port number ■ Destination IP: Numeric IP address ■ Prefix Len: Mask of the IP address in integers between 1 and 32 ■ Port: Valid port number 4 In Match Either Source or Destination, you can display flows that pertain to either a source IP or a destination IP. To make this a broader query, enter data in the following fields: ■ Source or Destination IP: Numeric IP address ■ Prefix Len: Mask of the IP address in integers between 1 and 32 ■ Port: Valid port number