Network Management

Reply
Highlighted
MVP

Airwave Traffic report - https AND svc-https?

When taking Traffic reports from Airwave we always get both svc-https and https in our report.

 

Anyone that can explain the difference between the two or rather, how to get them showing up as one if they are the same?


Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found a post helpful or important? Click the "Thumbs Up" icon to give kudos.
-- Problem Solved? Click "Accept as Solution" in a post.
Highlighted
MVP Expert

Re: Airwave Traffic report - https AND svc-https?

I believe mostly svc-https is Guest traffic, cross check once and also share the screen shot if possible.


Pavan Arshewar | ACCP

If my post address your queries, give kudos and accept as solution!
NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Highlighted
MVP

Re: Airwave Traffic report - https AND svc-https?

I am not sure I get your "it is guest traffic" comment.

Here's the requested screenshot.

2xhttps.png

 

 

As you can see Airwave seems to diferently classify svc-https as apposed to https, which is what I do not understand.

I figured it was something coming over from the controllers user-role or access-list but we even see this when we filter on a specific user-role which is an allowall (no https service explicitly defined).


Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found a post helpful or important? Click the "Thumbs Up" icon to give kudos.
-- Problem Solved? Click "Accept as Solution" in a post.
Highlighted
MVP Expert

Re: Airwave Traffic report - https AND svc-https?

svc-https is  tcp/ 443 network service on controller, could you run below command on controller to see if controller itself categorizing this or Airwave.

 

#show datapath session dpi | include svc-https

 

 


Pavan Arshewar | ACCP

If my post address your queries, give kudos and accept as solution!
NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Highlighted
MVP

Re: Airwave Traffic report - https AND svc-https?

no output on controller. 

AppID is 0 for all traffic.


Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found a post helpful or important? Click the "Thumbs Up" icon to give kudos.
-- Problem Solved? Click "Accept as Solution" in a post.
Highlighted
MVP Expert

Re: Airwave Traffic report - https AND svc-https?

Are you seeing application informaiton on controller?We need to install PEF license to view application information.

 

command show list of licenses installed

#show license


Pavan Arshewar | ACCP

If my post address your queries, give kudos and accept as solution!
NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Highlighted
MVP

Re: Airwave Traffic report - https AND svc-https?

PEF is installed and apprf has data.

Looking at the GUI the controllers traffic analysis has both svc-https and https.


Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found a post helpful or important? Click the "Thumbs Up" icon to give kudos.
-- Problem Solved? Click "Accept as Solution" in a post.
Highlighted
MVP

Re: Airwave Traffic report - https AND svc-https?

Another thing I noticed is that Traffic Analysis on the controller shows more than a dozen Google Drive destinations with no way for me to distinguish one from the other.

 

I have hence opened a support ticket and will get back with the results from that.


Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found a post helpful or important? Click the "Thumbs Up" icon to give kudos.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: