Core Detail Pages
The following topics cover the detail views in the Network Explorer module of the Core section of the portal:
- About Detail Pages
- Detail View Types
- Detail Page UI
- Traffic View UI
- Traffic View Panes
- Kentik Map Tab
- Synthetics Tab
- More Info Tab
Note: For aggregate pages in the Network Explorer module, see Core Aggregate Views.
About Detail Pages
Detail views are part of the Network Explorer module in the Core section of the portal. While Core Aggregate Views present all traffic related to a given data source or dimension, e.g. all devices or all ASNs, detail views present information for an individual entity, e.g. one device or one ASN.
Accessing Detail Views
There are a few different ways to drill down to a detail view:
- Directly from Network Explorer: In the tabbed Traffic Table at the bottom of Core » Network Explorer the values in the left column of each of the table’s tabs are links that take you to an individual instance of the class corresponding to the tab.
Example: In the Applications tab, click on an application in the list to go to the detail view for that individual application.
- From an aggregate view: Go to Core » Network Explorer and click the Explore Top Talkers button in the Core card at the top of the right sidebar, then pick an aggregate view from the drop-down menu. In the traffic table at the bottom of the resulting view, click on the name of the individual instance you’d like to see.
Example: On the Applications aggregate view, each row of the table will list an individual application. Click the application's name in the table to go to that application’s detail page.
- From a different module: In some cases the results from modules outside of Network Explorer will include links to detail views within Network Explorer:
Example: On Edge » Discover Peers, the Potential Peers table includes an AS Name column. Click a value in this column to go to the detail page for that ASN.
Detail View Types
A Details page in Network Explorer is made up of one or more detail views. The types of views on a given Details page vary depending on the type of network entity (device or dimension) being viewed. If more than one view type is included, each view is presented in its own tab.
All Details pages include a Traffic view. If the page includes additional views, the Traffic view is presented in a tab. While many elements of the Traffic view are common to all types of network entities (see Common Traffic UI), some elements are displayed only for particular types of entities (see View-specific Traffic UI).
In addition to the Traffic view, the Details pages for certain network entities have one or more additional types of views, each of which is presented in its own tab:
- Kentik Map: A view containing a Kentik Map showing the relationship between the network entity, other parts of your network, your cloud-hosted resources, and the Internet (see Kentik Map Tab).
- Synthetics: A view containing information about synthetic testing related to the network entity (see Synthetics Tab).
- More Info: A view providing additional details about the network entity (see More Info Tab).
The table below shows the Details pages that include tabs with one or more of the additional views listed above.
Note: The following Details pages have no additional views, so the Traffic view is not presented within a tab:
Applications, AWS Region, Azure Region, BGP Communities, BGP Path, Connectivity Type, GCP Region, INET Family, Interfaces, Network Boundary, Packet Size, Prefix/LEN, Protocol, Providers, Service (Port+Proto)
Detail Page UI
Each Detail page may, depending on the type of network entity it represents, include the following UI elements:
- Related Insights (on SubNav): A button that pops up the Insights Pane, which shows insights related to the traffic detailed on this page (e.g. to a given application on an Applications detail page; see About Insights).
- Name: The name of the individual instance about which this view provides information, e.g. “https” for a detail view of the https application.
- Description (Device, Site, and Interface views only): Located just below the name field, the contents of this field depend on the type of view:
- Device: The description text entered when the device was registered with Kentik or subsequently edited.
- Interface: The interface description as either defined in the device and retrieved via SNMP or specified manually. Capped at 128 characters.
- Site: The street address of the site.
- Configure (Device, Interface and Site views): A button that opens the configuration dialog for the individual device (see Network Devices) or interface (see Manage Interfaces), where you can edit settings.
- Tabs: A set of tabs, listed in Detail View Types, that present different views related to this Details page's individual network entity (e.g. device or dimension). The tabs that appear on a given Details page are determined by the type of the network entity.
Note: All Details pages include a Traffic view. If the page includes additional tabs then the Traffic view is also presented as a tab.
Traffic View UI
The UI elements of the main content area in a Traffic view are covered in the following topics:
Common Traffic UI
The following UI elements are common to the Traffic view of all Details pages in Network Explorer (for a list, see the table in Detail View Types):
- Parameter controls: Set the parameters of the query whose results are displayed in the page's graph and table (see Parameter Controls):
- Filters control: Apply filters that narrow the traffic covered by the query results.
- Aggregate selector: Choose the calculation by which traffic data displayed in the graph and table is aggregated
- Metric selector: Set the metric by which query results are evaluated for top-X and displayed in the graph and table.
- Time Range selector: Set the duration, looking back from the current time, covered by the query whose results are displayed in the graph and table.
- Tabbed graph: Displays visualizations of the results returned from the query specified with the Parameter Controls (see Traffic View Graph).
- Detail Traffic Table: A top-X table presenting the results returned from the query specified with the Parameter Controls. The group-by dimension for the query is the dimension corresponding to the current page, e.g. when the page is Applications the dimension is applications. The columns of the table are listed in Traffic View Table.
View-specific Traffic UI
The following additional UI elements are found only on specific Network Explorer detail views:
- Classification indicator (Interface views): Located to the right of the interface name, this indicates the Interface Classification status of this interface (see Interface Classification), either Classified or Not Classified.
- Device Labels (Device views only): Labels that have been applied to the device (see Labels).
- Engineer Traffic (Interface views only): A button that opens the Engineer Interface Traffic page for an individual interface.
- Information Pane (Interface views): A display area, to the left of the tabbed graph, for statistics and other information (see Interface Information Pane).
- Logical Map (Providers only): A Logical Map that's presented in a pane within the Traffic view, below the Tabbed Graph and above the Detail Traffic Table (see Logical Map Pane).
Traffic View Panes
The panes of the Traffic view are covered in the following topics:
Traffic View Graph
The graph in the Traffic view displays visualizations of the results returned from the query specified with the Parameter Controls (see Common Traffic UI). Depending on your actual traffic volume, there will be a tab for each of the following types of traffic:
- Total: All traffic regardless of profile.
- Inbound: Traffic that originates outside your network and terminates inside your network.
- Outbound: Traffic that originates inside your network and terminates outside your network.
- Internal: Traffic that both originates and terminates inside your network.
- Through: Traffic that both originates and terminates outside your network.
- Other: Traffic that is not classified by the above profiles.
Traffic View Table
The table in the Traffic view is tabbed, with each tab providing information related to a different dimension. The currently displayed tabs (up to eight) are specified with the Customize Tabs Dialog.
- For information about the UI of a tabbed table, see Traffic Table UI.
- For information about a specific dimension that is listed as being available for tabbed tables, see Dimensions Reference.
- The dimensions available for tabs are a subset of the dimensions available for group-by and filtering in Data Explorer.
- For a given Kentik customer, the list of dimensions will be the same in all instances of the Customize Tabs dialog, but may vary over time depending on what types of devices you currently have registered with Kentik.
Interface Information Pane
The Interface Information pane, which appears only on Detail pages whose type is Interface, is located to the left of the Tabbed Graph. The pane displays the following information about the interface:
- Device: The name of the device to which this interface belongs.
- SNMP ID: The SNMP ID (polled or manually specified) of this interface.
- IP: The primary IP address of this interface.
- Secondary IPs: Secondary IP address(es) assigned to this interface.
- Capacity: The maximum capacity in mbps as reported by SNMP.
- Provider: The provider value assigned to the interface by provider classification (see About Provider Classification).
- Connectivity Type: The network boundary value assigned to the interface by interface classification (see Connectivity Type Attribute).
- Network Boundary: The network boundary value assigned to the interface by interface classification (see Network Boundary Attribute).
Logical Map Pane
The Logical Map pane, which appears only on Detail pages whose type is Provider, is located between the Traffic View Graph and the Traffic View Table. The contents of the pane are essentially the same as in the portal’s Logical Map module, except that the pane does not have a settings sidebar. An "open in new" icon at the upper left of the pane will open the logical map for this provider in the module.
Kentik Map Tab
The Kentik Map tab, which is present on the Detail page for devices and sites only, displays a network topology map, as described in Kentik Map, but without the Options sidebar found in the full Kentik Map module.
A Synthetics tab may be present on a Detail page in Network Explorer for one of the following types of network entities: ASN, city, country, IP address, nexthop ASN, region, or site. The contents of the Synthetics tab depends on the existence of a synthetic test toward that entity.
No Synthetic Test
The Synthetics tab on a Details page may consist of one of the following notifications indicating that the entity is not currently being tested:
- No agents deployed: The entity is a site and no ksynth agent has been deployed in that site. Click the Manage Agents button to go to the Agent Management module in Synthetics, where you can deploy a private agent to the site.
- Not currently monitored: A synthetic test hasn't already been created (e.g. in the Test Control Center) for testing toward the entity. Click the Start Monitoring button to open a dialog that enables you to specify some basic settings for the test.
Once the test is configured you can configure features such as Advanced Options and Notifications (see Modify Test Settings).
Synthetic Test Exists
If there's already a synthetic test involving the entity, the notification at the top of the tab will state that testing is enabled and give the number of agents involved. It will also include the following buttons:
- View Details: Takes you to the Test Details Page in the Test Control Center that corresponds to the test involving this entity.
- Configure: Opens a dialog that enables you to specify some basic settings for the test (for greater control, see Modify Test Settings).
- Stop Monitoring: Opens a confirming dialog that allows you to stop the test.
The content of the remainder of the tab (below the notification) will always be the same as the content on the corresponding Test Details Page in the Test Control Center.
Modify Test Settings
Once the basics of a test are set in the dialog that opens from the Configure button you can configure additional features such as Advanced Options and Notifications:
More Info Tab
The More Info tab, found on Detail pages for devices, IPs, and sites, is covered in the following topics:
Device More Info Tab
On Detail pages for devices the More Info tab displays a wide variety of information about the device, which is covered in the topics below.
Device General Details
General information about the device:
- Manufacturer: If SNMP polling is enabled and the device has a value for the ifDescr OID (see Information SNMP OIDs), the value is displayed in this field.
- Description: User-provided descriptive text entered in the Description field of the device's configuration dialog. The field is not shown if no description has been provided.
- Site: The site to which this device is assigned (see Manage Sites).
- Plan: The billing plan to which the device is assigned (see Licenses).
- Kproxy Agents: The kproxy agents, if any, via which this device sends flow data to Kentik (see Kentik Proxy Agent).
- Sending IPs: IP address(es) from which the router sends flow.
Device Flow Details
Details related to the flow records sent from the device to Kentik (see Flow Overview):
- Flow: Indicates whether Kentik is receiving flow from the device. The indicator has the following states:
- No Flow Detected (red): Displayed when no flow is detected from the device.
- Direct flow detected (green): Flow is coming directly from a router.
- Kentik Agent detected (green): Flow is coming via Kentik's kproxy software agent (see Kentik Proxy Agent).
- FPS (Sampled): The rate at which Kentik has been ingesting flow records from the device over the last six hours. This value is after any downsampling Kentik performs pursuant to the terms of the plan to which the device is assigned.
- FPS (Raw): The rate at which the device has been generating flow records over the last six hours (before any Kentik downsampling).
- Plan FPS: The maximum FPS supported by the plan to which this device is assigned.
- Flow Type: The format of the flow data, e.g. Netflow v5, v9, IPFIX, or sflow (see Flow Protocols).
- Sample Rate: The ratio of total flows per sampled flow (see Flow Sampling).
Device Interface Details
Details related to the interfaces on the device:
- Interfaces Classified: The number of classified interfaces, the total number of interfaces, and the percent of interfaces that have been classified (see About Interface Classification).
- View Interfaces: A button that takes you to the Interfaces page (Settings » Interfaces) where you can manage the interfaces on your devices (see Manage Interfaces).
Device SNMP Details
Details related to SNMP polling of the device by Kentik (see SNMP OID Polling):
- SNMP status: Current status of SNMP polling, e.g. Detected or Not Detected.
- SNMP Polling (see SNMP Polling Intervals):
- If Standard, SNMP polling is every 10 min for interface counters and 3 hrs for descriptions.
- If Minimal, interface polling is disabled and descriptions are polled every 6 hours.
- SNMP v3 Auth: Indicates whether v3 authentication for SNMP polling is on or off (see About SNMP V3).
Device BGP Details
Details related to BGP on the device (see BGP Overview):
- BGP status: Current status of BGP peering with the device, e.g. Established, Not Established, or Not Configured.
- BGP Prefixes: For devices with BGP enabled this indicator shows the number of prefixes currently (within last 5 minutes) in the BGP routing table.
Additional Kentik capabilities enabled on this device:
- CDN attribution: Enabled if the device is a host and its Contribute to CDN Attribution switch is on in the General tab of the Device Settings dialog (see Network Devices).
- Flowspec: Enabled if the device's BGP Flowspec Compatible switch is on in the BGP tab of the Device Settings dialog.
- RTBH: Enabled if the device is assigned to an RTBH mitigation platform (see RTBH Platform Settings).
IP More Info Tab
The More Info tab on Details pages for IP addresses includes the following information:
- AS Details: The name and number of the AS that contains the IP address.
- Location: The physical location of the registered owner of the AS that contains the IP address.
- CDNs: Indicates whether or not the IP is contained in an AS that is a CDN.
- Threat Feeds: Indicates whether the IP appears on any of the lists that Kentik checks for known threats (see Using Threat Feeds).
- Network Classification: Indicates whether the IP address is internal to your network or external (see Network Classification).
Site More Info Tab
The More Info tab on Details pages for sites includes the following information:
- Kproxy Agents: The kproxy agents, if any, via which flow data is sent from the devices at this site to Kentik (see Kentik Proxy Agent).