INTOUCH® INSA
Network Security Agent
Previous Contents Index

Report Creation

When you select the URL Connection report menu option, the report is generated and you are asked for an output option (see Section 6.6.2, Report Output Options).

The following is an example of the Top URL Connection Report: 


16-Jan-1997                           INTOUCH INSA - Network Security Agent                          Page 1 
                                            Top URL Connection Report 
 
Count  Browser's IP                 URL                                       Last Access           Percent 
-----  ---------------------------  ----------------------------------------  --------------------  ------- 
   31  TEST.TTINET.COM              http://RST2.CNE.COM/mark/flash.html       16-Jan-1997 16:30:05    31.96 
   15  PAP-103.TORONTO-65.ICAN.NET  http://TR.TTINET.COM/skt/farm/horse.html  16-Jan-1997 19:42:21    15.46 
   11  CROWN.NNNEXSS.COM            http://TR.TTINET.COM/sst/humor.html       16-Jan-1997 09:34:38    11.34 
   10  214.112.051.113              http://ABR.PCGAMES.COM/artist.shtml       15-Jan-1997 16:00:51    10.31 
    7  205.154.6.23                 http://TR.TTINET.COM/sst/maze/            16-Jan-1997 11:37:28     7.22 
    6  AM123-14.FILEIP.MICH.NET     http://TR.TTINET.COM/sst/index.html       16-Jan-1997 20:38:37     6.19 
    5  TR-T122T-16.HERDAC.ON.CA     http://TR.TTINET.COM/sst/humor.html       16-Jan-1997 09:37:48     5.15 
    4  KUH0102.SET.KUH.EDU          http://TR.TTINET.COM/sst/met.html         16-Jan-1997 00:20:25     4.12 
    4  165.134.16.18                http://TR.TTINET.COM/sst/ray.html         16-Jan-1997 12:19:31     4.12 
    4  203.11.101.85                http://TR.TTINET.COM/sst/interview.html   16-Jan-1997 14:15:15     4.12

10.14 Top E-mail by Count Report

The Email menu option creates a report by count of addresses which have sent and/or received E-mail. 



             +-------Reports-------+ 
             |  Incident           | 
             |  Alert              | 
             |  Recordings         | 
             |  Browser Accesses   | 
             |  URL Accesses       | 
             |  Active Browsers    | 
             |  Audit              | 
             |  Page             +---------------Top----------------+ 
             |  Top              |  IP Address (volume)             | 
             |  Archive          |  IP Connection (volume)          | 
             +-------------------|  Browser Accesses                | 
                                 |  URL Accesses                    | 
                                 |  URL Connection                  | 
                                 |  Email                           | 
                                 |  Email (volume)                  | 
                                 |  Email Correspondence            | 
                                 |  Email Correspondence (volume)   | 
                                 +----------------------------------+

The Top E-mail Report shows, in descending order, the most active E-mail addresses by count. These are the addresses which have sent and/or received E-mail. The report information includes:
  Count number of E-mail messages sent and/or received
  Address E-mail address
  Last Access date and time of the last message
  Percent percentage of the total count of all E-mail

E-mail Type

After you select Email from the Top reports menu, you are asked for the type of E-mail to include on the report. 



 INTOUCH INSA            Top E-mail (by count) Report               08-Feb-1997 
 
+----------- E-mail Type ------------------------------------------------------+ 
|Type:                                                                         | 
+------------------------------------------------------------------------------+ 
 
 
 
 
                               +-E-mail Type-+ 
                               |  Combined   | 
                               |  Sent       | 
                               |  Received   | 
                               |-------------| 
                               |  Exit       | 
                               +-------------+

  Select Combined to include addresses which have sent and received E-mail.
  Select Sent to include addresses which have only sent E-mail.
  Select Received to include addresses which have only received E-mail.

The E-mail type selection is displayed at the top of the screen and you are asked if you want to proceed with report creation.

Report Creation

The Top E-mail Report - by count - is generated and you are asked for an output option (see Section 6.6.2, Report Output Options).

The following is an example of a Top E-mail Report: 


08-Feb-1997              INTOUCH INSA - Network Security Agent            Page 1 
                   Top E-mail Report (by count) -- Sent and Received 
 
      Count  Address                               Last Access           Percent 
-----------  ------------------------------------  --------------------  ------- 
         39  [email protected]                        08-Feb-1997 10:44:34    18.40 
         37  [email protected]                      08-Feb-1997 08:16:05    17.45 
         25  [email protected]                      08-Feb-1997 09:53:08    11.79 
         22  [email protected]                      08-Feb-1997 09:15:24    10.38 
         19  [email protected]                        08-Feb-1997 09:14:19     8.96 
         18  [email protected]                     07-Feb-1997 23:26:52     8.49 
         16  [email protected]                          07-Feb-1997 18:52:50     7.55 
         15  [email protected]                         07-Feb-1997 23:26:52     7.08 
         11  [email protected]                         08-Feb-1997 09:53:08     5.19 
         10  [email protected]                        08-Feb-1997 09:26:09     4.72

10.15 Top E-mail by Volume Report

The Email by Volume menu option creates a report by K bytes of addresses which have sent and/or received E-mail. 



             +-------Reports-------+ 
             |  Incident           | 
             |  Alert              | 
             |  Recordings         | 
             |  Browser Accesses   | 
             |  URL Accesses       | 
             |  Active Browsers    | 
             |  Audit              | 
             |  Page             +---------------Top----------------+ 
             |  Top              |  IP Address (volume)             | 
             |  Archive          |  IP Connection (volume)          | 
             +-------------------|  Browser Accesses                | 
                                 |  URL Accesses                    | 
                                 |  URL Connection                  | 
                                 |  Email                           | 
                                 |  Email (volume)                  | 
                                 |  Email Correspondence            | 
                                 |  Email Correspondence (volume)   | 
                                 +----------------------------------+

The E-mail - by Volume - Report shows, in descending order, the most active E-mail addresses by K bytes. The report information includes:
  K bytes number of K bytes of the E-mail messages sent and/or received
  Address E-mail address
  Last Access date and time of the last message
  Percent percentage of the total K bytes of all E-mail

E-mail Type

After you select Email by Volume from the Top reports menu, you are asked for the type of E-mail to include on the report. 



 INTOUCH INSA            Top E-mail (by volume) Report              08-Feb-1997 
 
+----------- E-mail Type ------------------------------------------------------+ 
|Type:                                                                         | 
+------------------------------------------------------------------------------+ 
 
 
 
 
                               +-E-mail Type-+ 
                               |  Combined   | 
                               |  Sent       | 
                               |  Received   | 
                               |-------------| 
                               |  Exit       | 
                               +-------------+

  Select Combined to include addresses which have sent and received E-mail.
  Select Sent to include addresses which have only sent E-mail.
  Select Received to include addresses which have only received E-mail.

The E-mail type selection is displayed at the top of the screen and you are asked if you want to proceed with report creation.

Report Creation

The Top E-mail Report - by volume - is generated and you are asked for an output option (see Section 6.6.2, Report Output Options).

The following is an example of a Top E-mail by Volume Report: 


08-Feb-1997              INTOUCH INSA - Network Security Agent            Page 1 
                  Top E-mail Report (by volume) -- Sent and Received 
 
    K bytes  Address                               Last Access           Percent 
-----------  ------------------------------------  --------------------  ------- 
        387  [email protected]                        08-Feb-1997 11:04:07    24.49 
        352  [email protected]                      08-Feb-1997 09:15:24    22.29 
        306  [email protected]                      08-Feb-1997 08:16:05    19.39 
        108  [email protected]                      08-Feb-1997 09:53:08     6.84 
         91  [email protected]                          07-Feb-1997 18:52:50     5.77 
         82  [email protected]                  07-Feb-1997 22:15:52     5.19 
         74  [email protected]                        08-Feb-1997 09:14:19     4.67 
         72  [email protected]                     07-Feb-1997 23:26:52     4.55 
         54  [email protected]                         07-Feb-1997 23:26:52     3.44 
         53  [email protected]                         08-Feb-1997 09:53:08     3.36

10.16 Top E-mail Correspondence by Count Report

The Email Correspondence menu option creates a report of E-mail correspondence between sources and destinations by count. 



             +-------Reports-------+ 
             |  Incident           | 
             |  Alert              | 
             |  Recordings         | 
             |  Browser Accesses   | 
             |  URL Accesses       | 
             |  Active Browsers    | 
             |  Audit              | 
             |  Page             +---------------Top----------------+ 
             |  Top              |  IP Address (volume)             | 
             |  Archive          |  IP Connection (volume)          | 
             +-------------------|  Browser Accesses                | 
                                 |  URL Accesses                    | 
                                 |  URL Connection                  | 
                                 |  Email                           | 
                                 |  Email (volume)                  | 
                                 |  Email Correspondence            | 
                                 |  Email Correspondence (volume)   | 
                                 +----------------------------------+

The Top E-mail Correspondence Report shows, in descending order, the most active sources and destinations by count. The report information includes:
  Count number of E-mail messages sent and received
  Source E-mail address of sender
  Destination E-mail address of receiver
  Last Access date and time of the last message
  Percent percentage of the total count of all E-mail

Report Creation

After you select Email Correspondence from the Top reports menu, the report is generated and you are asked for an output option (see Section 6.6.2, Report Output Options).

The following is an example of the Top Correspondence Report: 


08-Feb-1997         INTOUCH INSA - Network Security Agent                 Page 1 
                    Top Correspondence Report (by count) 
 
Count  Source                  Destination          Last Access          Percent 
-----  ----------------------- -------------------- -------------------- ------- 
   15  [email protected]           [email protected]    07-Feb-1997 23:26:52   26.79 
   11  [email protected]           [email protected]     08-Feb-1997 09:53:08   19.64 
    5  [email protected]          [email protected]     07-Feb-1997 14:28:00    8.93 
    4  [email protected]       [email protected]       08-Feb-1997 02:44:22    7.14 
    4  [email protected]        [email protected]       08-Feb-1997 09:14:19    7.14 
    4  [email protected]        [email protected]     08-Feb-1997 09:15:24    7.14 
    4  [email protected]          [email protected]     07-Feb-1997 19:07:03    7.14 
    3  [email protected]    [email protected]     07-Feb-1997 22:15:52    5.36 
    3  [email protected]    [email protected]       07-Feb-1997 22:14:45    5.36 
    3  [email protected]          [email protected]        08-Feb-1997 01:48:36    5.36

10.17 Top E-mail Correspondence by Volume Report

The Email Correspondence by Volume menu option creates a report of E-mail correspondence between sources and destinations by K bytes. 



             +-------Reports-------+ 
             |  Incident           | 
             |  Alert              | 
             |  Recordings         | 
             |  Browser Accesses   | 
             |  URL Accesses       | 
             |  Active Browsers    | 
             |  Audit              | 
             |  Page             +---------------Top----------------+ 
             |  Top              |  IP Address (volume)             | 
             |  Archive          |  IP Connection (volume)          | 
             +-------------------|  Browser Accesses                | 
                                 |  URL Accesses                    | 
                                 |  URL Connection                  | 
                                 |  Email                           | 
                                 |  Email (volume)                  | 
                                 |  Email Correspondence            | 
                                 |  Email Correspondence (volume)   | 
                                 +----------------------------------+

The Top E-mail Correspondence by Volume Report shows, in descending order, the most active sources and destinations by K bytes. The report information includes:
  K bytes number of K bytes for E-mail messages sent and received
  Source E-mail address of sender
  Destination E-mail address of receiver
  Last Access date and time of the last message
  Percent percentage of the total count of all E-mail

Report Creation

After you select Email Correspondence by Volume from the Top reports menu, the report is generated and you are asked for an output option (see Section 6.6.2, Report Output Options).

The following is an example of the Top Correspondence by Volume Report: 


08-Feb-1997         INTOUCH INSA - Network Security Agent                 Page 1 
                    Top Correspondence Report (by volume) 
 
K Bytes  Source                  Destination        Last Access          Percent 
-------  ----------------------- ------------------ -------------------- ------- 
    274  [email protected]          [email protected]   07-Feb-1997 19:07:03   48.97 
     54  [email protected]           [email protected]  07-Feb-1997 23:26:52    9.72 
     53  [email protected]           [email protected]   08-Feb-1997 09:53:08    9.48 
     42  [email protected]    [email protected]   07-Feb-1997 22:15:52    7.58 
     40  [email protected]    [email protected]     07-Feb-1997 22:14:45    7.06 
     30  [email protected]      [email protected]     07-Feb-1997 22:45:29    5.30 
     23  [email protected]       [email protected]     08-Feb-1997 02:44:22    4.03 
     17  [email protected]        [email protected]   08-Feb-1997 09:15:24    3.04 
     16  [email protected]        [email protected]     08-Feb-1997 09:14:19    2.89 
     11  [email protected]      [email protected]   07-Feb-1997 20:44:13    1.93

10.18 Archive Incident Reports

The Archive Incident menu option creates reports of incidents in an archived incident file (refer to Section 10.1, Incident Reports, for information on creating reports from the current incident file). 



                       +-------Reports-------+ 
                       |  Incident           | 
                       |  Alert              | 
                       |  Recordings         | 
                       |  Browser Accesses   | 
                       |  URL Accesses       | 
                       |  Active Browsers    | 
                       |  Audit              | 
                       |  Page               | 
                       |  Top              [>+----Archive----+ 
                       |  Archive          [>|  Incident     | 
                       +---------------------|  Recordings   | 
                                             |  Audit        | 
                                             +---------------+

Creating Archive Incident Reports is basically the same as creating current incident reports. The difference is that the report data comes from an archive file instead of from the current file.

File Selection

When the Archive Incident report menu option is selected, a list of the archived incident files is displayed. 



+-----------------------------------Incident-----------------------------------+ 
|  Files    Exit                                                               | 
+------------------------------------------------------------------------------+ 
  +Archived Incidents+ 
  |                  | 
  |   Files          | 
  |  APRIL_01_15     | 
  |  APRIL_16_30     | 
  |  MARCH_01_15     | 
  |  MARCH_16_31     | 
  +------------------+ 
 
 
 
 
 
 
EXIT = Exit                       INTOUCH INSA             \ = Back  HELP = Help

Select the archived incident file that your want to report on.

After you select the archive file, the Incident Report selection criteria screen is displayed. The name of the archive file you select is shown in the Report Type box. For example: 



 INTOUCH INSA              Archived Incident Report                 15-Jan-1997 
 
+------------- Sort Order -------------++------------ Report Type -------------+ 
|1)                                    ||                                      | 
|2)                                    ||                                      | 
|3)                                    ||File: MARCH_01_15                     | 
|4)                                    ||Type:                                 | 
|5)                                    ||                                      | 
|6)                                    ||                                      | 
+--------------------------------------++--------------------------------------+

You are asked for the sort order and the other report selection criteria. If you need help to answer any of the prompts, you can press the [Help] key to get information, or refer to Section 10.1, Incident Reports.

10.19 Archive Recordings Reports

The Archive Recordings menu option creates reports of recordings in an archived recordings file (refer to Section 10.3, Recordings Reports, for information on creating reports from the current recordings file). 



                       +-------Reports-------+ 
                       |  Incident           | 
                       |  Alert              | 
                       |  Recordings         | 
                       |  Browser Accesses   | 
                       |  URL Accesses       | 
                       |  Active Browsers    | 
                       |  Audit              | 
                       |  Page               | 
                       |  Top              [>+----Archive----+ 
                       |  Archive          [>|  Incident     | 
                       +---------------------|  Recordings   | 
                                             |  Audit        | 
                                             +---------------+

Creating Archive Recordings Reports is basically the same as creating current recordings reports. The difference is that the report data comes from an archive file instead of from the current file.

Previous Next Contents Index