This month of August, we're releasing a sum of granular features, read on for more details.

New Site-based Dimensions

We’ve added the new dimensions “Site Country” and “BGP UE Site Country.” While the existing  “Source Country” and “Dest Country” dimensions tag traffic based on the country associated with the source or dest IP of the flow, these new dimensions tag flows based on the country associated with the PoP (and device) that the flows were received from. This allows you to filter or segment traffic by the geolocation of the network entry or exit point, rather than the geolocation of the host(s) that originated or terminated the traffic. These dimensions were added to aid traffic engineering, peering, or customer traffic analyses that rely on understanding the geolocation of network entry and exit points.

Major Update to Geo HeatMaps

Region Maps (a.k.a. sub-country) have been revamped. As shown below, the regions are now fully modeled in the mapping engine, providing easy-to-read region-based heatmaps.

We also now support heatmaps based on Custom Geos (described above), as shown in the example below.

Expanded Service Names

We’ve expanded the list of Service names that are displayed with well known TCP and UDP Ports when using the Source/Dest Proto:Port dimensions. While we previously resolved only about 2000 service names, we now include approximately 12,000 port/service name mappings, and any port number listed in the public NMAP dictionary is available for resolution. NMAP sources this dictionary both from IANA’s allocation master file and their own curation efforts.

New Filter for Interface List

We’ve added an “SNMP but no Flow” filter to narrow the interfaces listed in the Interfaces List (Admin » Interfaces). Applying the filter will restrict the list to interfaces that should have flow enabled but do not. This is particularly useful when troubleshooting ports that have traffic reported via SNMP but show no flow, the most likely cause being misconfiguration ot the flow-generating device.

New View Types

We’ve added two new types of visualizations (see Chart View Types):

• Sunburst visualization: A density-based view in which the dimensions that make up the key definition are represented as concentric rings that are segmented into wedges representing the top-X results (see Sunburst Chart).

• Horizon charts: A compact time-based visualization in which each of the top-X rows is represented by one “lane” into which different-colored bands of results are overlayed, with higher volume results in front (for a fuller explanation, refer to Horizon Chart).

Enhanced Usability and UI

We’ve made a number of recent usability and UI improvements:

• Alerting Device Selector: The Device selector in alerting now matches the Device selection dialog used in Data Explorer, which enables device selection by Device Labels.
• Device Labels Scalability: Additional colors have been added to allow a greater range of Device Labels.
• Nesting in Saved Filters: Filters can now be saved even if they contain one or more nested filter groups. Additionally, as shown below, filters with nesting (saved or ad-hoc) can now be used in Alerting (Dataset tab of Alert Policy dialog).