Core Detail Pages

The following topics cover the detail views in the Network Explorer module of the Core section of the portal:

Note: For aggregate pages in the Network Explorer module, see Core Aggregate Views.

The Details page for a site, showing the Traffic tab.
 

About Detail Pages

Detail views are part of the Network Explorer module in the Core section of the portal. While Core Aggregate Views present all traffic related to a given data source or dimension, e.g. all devices or all ASNs, detail views present information for an individual entity, e.g. one device or one ASN.

Accessing Detail Views

There are a few different ways to drill down to a detail view:

  • Directly from Network Explorer: In the tabbed Traffic Table at the bottom of Core » Network Explorer the values in the left column of each of the table’s tabs are links that take you to an individual instance of the class corresponding to the tab.
    Example: In the Applications tab, click on an application in the list to go to the detail view for that individual application.
  • From an aggregate view: Go to Core » Network Explorer and click the Explore Top Talkers button in the Core card at the top of the right sidebar, then pick an aggregate view from the drop-down menu. In the traffic table at the bottom of the resulting view, click on the name of the individual instance you’d like to see.
    Example: On the Applications aggregate view, each row of the table will list an individual application. Click the application's name in the table to go to that application’s detail page.
  • From a different module: In some cases the results from modules outside of Network Explorer will include links to detail views within Network Explorer:
    Example: On Edge » Discover Peers, the Potential Peers table includes an AS Name column. Click a value in this column to go to the detail page for that ASN.
 

Detail View Types

A Details page in Network Explorer is made up of one or more detail views. The types of views on a given Details page vary depending on the type of network entity (device or dimension) being viewed. If more than one view type is included, each view is presented in its own tab.

Traffic View

All Details pages include a Traffic view. If the page includes additional views, the Traffic view is presented in a tab. While many elements of the Traffic view are common to all types of network entities (see Common Traffic UI), some elements are displayed only for particular types of entities (see View-specific Traffic UI).

Additional Views

In addition to the Traffic view, the Details pages for certain network entities have one or more additional types of views, each of which is presented in its own tab:

  • Kentik Map: A view containing a Kentik Map showing the relationship between the network entity, other parts of your network, your cloud-hosted resources, and the Internet (see Kentik Map Tab).
  • Synthetics: A view containing information about synthetic testing related to the network entity (see Synthetics Tab).
  • More Info: A view providing additional details about the network entity (see More Info Tab).

The table below shows the Details pages that include tabs with one or more of the additional views listed above.

Entity
(Device or
Dimension)
Kentik Map
tab
Synthetics
tab
More Info
tab
ASNs No Yes No
Cities No Yes No
Countries No Yes No
Devices Yes No Yes
IPs No Yes Yes
Nexthop ASNs No Yes No
Regions No Yes No
Sites Yes Yes Yes

Note: The following Details pages have no additional views, so the Traffic view is not presented within a tab:
Applications, AWS Region, Azure Region, BGP Communities, BGP Path, Connectivity Type, GCP Region, INET Family, Interfaces, Network Boundary, Packet Size, Prefix/LEN, Protocol, Providers, Service (Port+Proto)

 

Detail Page UI

Each Detail page may, depending on the type of network entity it represents, include the following UI elements:

  • Related Insights (on SubNav): A button that pops up the Insights Pane, which shows insights related to the traffic detailed on this page (e.g. to a given application on an Applications detail page; see About Insights).
  • Name: The name of the individual instance about which this view provides information, e.g. “https” for a detail view of the https application.
  • Description (Device, Site, and Interface views only): Located just below the name field, the contents of this field depend on the type of view:
    - Device: The description text entered when the device was registered with Kentik or subsequently edited.
    - Interface: The interface description as either defined in the device and retrieved via SNMP or specified manually. Capped at 128 characters.
    - Site: The street address of the site.
  • Configure (Device, Interface and Site views): A button that opens the configuration dialog for the individual device (see Network Devices) or interface (see Manage Interfaces), where you can edit settings.
  • Tabs: A set of tabs, listed in Detail View Types, that present different views related to this Details page's individual network entity (e.g. device or dimension). The tabs that appear on a given Details page are determined by the type of the network entity.
    Note: All Details pages include a Traffic view. If the page includes additional tabs then the Traffic view is also presented as a tab.
The top-level controls and information fields for a Details page, including the tabs for various views.
 

Traffic View UI

The UI elements of the main content area in a Traffic view are covered in the following topics:

 
top  |  section

Common Traffic UI

The following UI elements are common to the Traffic view of all Details pages in Network Explorer (for a list, see the table in Detail View Types):

  • Parameter controls: Set the parameters of the query whose results are displayed in the page's graph and table (see Parameter Controls):
    - Filters control: Apply filters that narrow the traffic covered by the query results.
    - Aggregate selector: Choose the calculation by which traffic data displayed in the graph and table is aggregated
    - Metric selector: Set the metric by which query results are evaluated for top-X and displayed in the graph and table.
    - Time Range selector: Set the duration, looking back from the current time, covered by the query whose results are displayed in the graph and table.
  • Tabbed graph: Displays visualizations of the results returned from the query specified with the Parameter Controls (see Traffic View Graph).
  • Detail Traffic Table: A top-X table presenting the results returned from the query specified with the Parameter Controls. The group-by dimension for the query is the dimension corresponding to the current page, e.g. when the page is Applications the dimension is applications. The columns of the table are listed in Traffic View Table.
 
top  |  section

View-specific Traffic UI

The following additional UI elements are found only on specific Network Explorer detail views:

  • Classification indicator (Interface views): Located to the right of the interface name, this indicates the Interface Classification status of this interface (see Interface Classification), either Classified or Not Classified.
  • Device Labels (Device views only): Labels that have been applied to the device (see Labels).
  • Engineer Traffic (Interface views only): A button that opens the Engineer Interface Traffic page for an individual interface.
  • Information Pane (Interface views): A display area, to the left of the tabbed graph, for statistics and other information (see Interface Information Pane).
  • Logical Map (Providers only): A Logical Map that's presented in a pane within the Traffic view, below the Tabbed Graph and above the Detail Traffic Table (see Logical Map Pane).
 

Traffic View Panes

The panes of the Traffic view are covered in the following topics:

 
top  |  section

Traffic View Graph

The graph in the Traffic view displays visualizations of the results returned from the query specified with the Parameter Controls (see Common Traffic UI). Depending on your actual traffic volume, there will be a tab for each of the following types of traffic:

  • Total: All traffic regardless of profile.
  • Inbound: Traffic that originates outside your network and terminates inside your network.
  • Outbound: Traffic that originates inside your network and terminates outside your network.
  • Internal: Traffic that both originates and terminates inside your network.
  • Through: Traffic that both originates and terminates outside your network.
  • Other: Traffic that is not classified by the above profiles.

Notes:
- For a full description, see Tabbed Graph.
- For an explanation of how traffic is assigned to the above categories, see Simple Traffic Profile.

 
top  |  section

Traffic View Table

The table in the Traffic view is tabbed, with each tab providing information related to a different dimension. The currently displayed tabs (up to eight) are specified with the Customize Tabs Dialog.

  • For information about the UI of a tabbed table, see Traffic Table UI.
  • For information about a specific dimension that is listed as being available for tabbed tables, see Dimensions Reference.

Notes:
- The dimensions available for tabs are a subset of the dimensions available for group-by and filtering in Data Explorer.
- For a given Kentik customer, the list of dimensions will be the same in all instances of the Customize Tabs dialog, but may vary over time depending on what types of devices you currently have registered with Kentik.

The traffic table gives you a breakdown of the profile of traffic associated with a given network entity.
 
top  |  section

Interface Information Pane

The Interface Information pane, which appears only on Detail pages whose type is Interface, is located to the left of the Tabbed Graph. The pane displays the following information about the interface:

  • Device: The name of the device to which this interface belongs.
  • SNMP ID: The SNMP ID (polled or manually specified) of this interface.
  • IP: The primary IP address of this interface.
  • Secondary IPs: Secondary IP address(es) assigned to this interface.
  • Capacity: The maximum capacity in mbps as reported by SNMP.
  • Provider: The provider value assigned to the interface by provider classification (see About Provider Classification).
  • Connectivity Type: The network boundary value assigned to the interface by interface classification (see Connectivity Type Attribute).
  • Network Boundary: The network boundary value assigned to the interface by interface classification (see Network Boundary Attribute).
 
top  |  section

Logical Map Pane

The Logical Map pane, which appears only on Detail pages whose type is Provider, is located between the Traffic View Graph and the Traffic View Table. The contents of the pane are essentially the same as in the portal’s Logical Map module, except that the pane does not have a settings sidebar. An "open in new" icon at the upper left of the pane will open the logical map for this provider in the module.

 

Kentik Map Tab

The Kentik Map tab, which is present on the Detail page for devices and sites only, displays a network topology map, as described in Kentik Map, but without the Options sidebar found in the full Kentik Map module.

  • On a Site details page the map shows the topology of the devices in the site (see Site Topology).
  • On a Device details page the map shows the interfaces on the device (see Device Topology).
 

Synthetics Tab

A Synthetics tab may be present on a Detail page in Network Explorer for one of the following types of network entities: ASN, city, country, IP address, nexthop ASN, region, or site. The contents of the Synthetics tab depends on the existence of a synthetic test toward that entity.

No Synthetic Test

The Synthetics tab on a Details page may consist of one of the following notifications indicating that the entity is not currently being tested:

  • No agents deployed: The entity is a site and no ksynth agent has been deployed in that site. Click the Manage Agents button to go to the Agent Management module in Synthetics, where you can deploy a private agent to the site.
  • Not currently monitored: A synthetic test hasn't already been created (e.g. in the Test Control Center) for testing toward the entity. Click the Start Monitoring button to open a dialog that enables you to specify some basic settings for the test.

Once the test is configured you can configure features such as Advanced Options and Notifications (see Modify Test Settings).

Synthetic Test Exists

If there's already a synthetic test involving the entity, the notification at the top of the tab will state that testing is enabled and give the number of agents involved. It will also include the following buttons:

  • View Details: Takes you to the Test Details Page in the Test Control Center that corresponds to the test involving this entity.
  • Configure: Opens a dialog that enables you to specify some basic settings for the test (for greater control, see Modify Test Settings).
  • Stop Monitoring: Opens a confirming dialog that allows you to stop the test.

The content of the remainder of the tab (below the notification) will always be the same as the content on the corresponding Test Details Page in the Test Control Center.

Modify Test Settings

Once the basics of a test are set in the dialog that opens from the Configure button you can configure additional features such as Advanced Options and Notifications:

  1. Click the View Details button, described in the next topic, to go to the Test Details Page.
  2. Click the Edit Test button in the SubNav to go to the Test Settings Page.
 

More Info Tab

The More Info tab, found on Detail pages for devices, IPs, and sites, is covered in the following topics:

The More Info tab for a device.
 
top  |  section

Device More Info Tab

On Detail pages for devices the More Info tab displays a wide variety of information about the device, which is covered in the topics below.

Device General Details

General information about the device:

  • Manufacturer: If SNMP polling is enabled and the device has a value for the ifDescr OID (see Information SNMP OIDs), the value is displayed in this field.
  • Description: User-provided descriptive text entered in the Description field of the device's configuration dialog. The field is not shown if no description has been provided.
  • Site: The site to which this device is assigned (see Manage Sites).
  • Plan: The billing plan to which the device is assigned (see Licenses).
  • Kproxy Agents: The kproxy agents, if any, via which this device sends flow data to Kentik (see Kentik Proxy Agent).
  • Sending IPs: IP address(es) from which the router sends flow.

Device Flow Details

Details related to the flow records sent from the device to Kentik (see Flow Overview):

  • Flow: Indicates whether Kentik is receiving flow from the device. The indicator has the following states:
    - No Flow Detected (red): Displayed when no flow is detected from the device.
    - Direct flow detected (green): Flow is coming directly from a router.
    - Kentik Agent detected (green): Flow is coming via Kentik's kproxy software agent (see Kentik Proxy Agent).
  • FPS (Sampled): The rate at which Kentik has been ingesting flow records from the device over the last six hours. This value is after any downsampling Kentik performs pursuant to the terms of the plan to which the device is assigned.
  • FPS (Raw): The rate at which the device has been generating flow records over the last six hours (before any Kentik downsampling).
  • Plan FPS: The maximum FPS supported by the plan to which this device is assigned.
  • Flow Type: The format of the flow data, e.g. Netflow v5, v9, IPFIX, or sflow (see Flow Protocols).
  • Sample Rate: The ratio of total flows per sampled flow (see Flow Sampling).

Device Interface Details

Details related to the interfaces on the device:

  • Interfaces Classified: The number of classified interfaces, the total number of interfaces, and the percent of interfaces that have been classified (see About Interface Classification).
  • View Interfaces: A button that takes you to the Interfaces page (Settings » Interfaces) where you can manage the interfaces on your devices (see Manage Interfaces).

Device SNMP Details

Details related to SNMP polling of the device by Kentik (see SNMP OID Polling):

  • SNMP status: Current status of SNMP polling, e.g. Detected or Not Detected.
  • SNMP Polling (see SNMP Polling Intervals):
    - If Standard, SNMP polling is every 10 min for interface counters and 3 hrs for descriptions.
    - If Minimal, interface polling is disabled and descriptions are polled every 6 hours.
  • SNMP v3 Auth: Indicates whether v3 authentication for SNMP polling is on or off (see About SNMP V3).

Device BGP Details

Details related to BGP on the device (see BGP Overview):

  • BGP status: Current status of BGP peering with the device, e.g. Established, Not Established, or Not Configured.
  • BGP Prefixes: For devices with BGP enabled this indicator shows the number of prefixes currently (within last 5 minutes) in the BGP routing table.

Device Features

Additional Kentik capabilities enabled on this device:

  • CDN attribution: Enabled if the device is a host and its Contribute to CDN Attribution switch is on in the General tab of the Device Settings dialog (see Network Devices).
  • Flowspec: Enabled if the device's BGP Flowspec Compatible switch is on in the BGP tab of the Device Settings dialog.
  • RTBH: Enabled if the device is assigned to an RTBH mitigation platform (see RTBH Platform Settings).
 
top  |  section

IP More Info Tab

The More Info tab on Details pages for IP addresses includes the following information:

  • AS Details: The name and number of the AS that contains the IP address.
  • Location: The physical location of the registered owner of the AS that contains the IP address.
  • CDNs: Indicates whether or not the IP is contained in an AS that is a CDN.
  • Threat Feeds: Indicates whether the IP appears on any of the lists that Kentik checks for known threats (see Using Threat Feeds).
  • Network Classification: Indicates whether the IP address is internal to your network or external (see Network Classification).
 
top  |  section

Site More Info Tab

The More Info tab on Details pages for sites includes the following information:

  • Kproxy Agents: The kproxy agents, if any, via which flow data is sent from the devices at this site to Kentik (see Kentik Proxy Agent).
© 2014- Kentik

In this article: