Samples

# Reptor Sample Reports

Alerts

  This sample shows connections that have triggered alerts and the alert summary. The alerts are based on the following criteria:

  - FTP connections that were made before 8am.
  - FTP connections that lasted more than 15 minutes.
  - HTTP connections that lasted more than 10 minutes.
  - SMTP connections that lasted more than 5 minutes.
  - FTP connections that transferred more than 5 megabytes.
  - HTTP connections that transferred more than 5 megabytes.
  - SMTP connections that transferred more than 1 megabyte.
  - A URL or desination host that matched the string "casino" or "gamble".

All SSH Activity

  By setting very low thresholds, all connections of a certain type can be reported.

Protocol and Interface Summaries

  The total summary, protocol summary and interface summary.

Host Summaries

  Host summaries for each interface. The Host Summary [Inside] shows you which of your internal hosts have generated the most traffic. The Host Summary [Outside] shows you which external sites are the most popular.

User Summary

  Shows activity by user.

Raptor Mobile Summary

  Shows the number of times each Raptor Mobile net entity initiated a tunnel.

Traffic Filtering

  Reporting can be limited by traffic flowing in any direction and/or through any interface. In this example, only traffic coming from or going to the DMZ is considered.

Time of Day and Top Level Domain Summaries

  Shows traffic broken down by time of day and top level domain.

Message Summary

  Summary of all logfile messages (not just type 121 statistics).

History Summary

  Shows the total number of hits and total bytes for the last 30 days.

Protocol Detail

  Shows the traffic of specific protocols, gouped by both host and user.

Host Detail

  Shows the traffic of specific hosts, grouped by both protocol and user.

User Detail

  Shows the traffic of specific users, grouped by both protocol and host.

Everything

  Everything packed into one big report.