Skip to main content

Hosts

Concept

The host detailed view represent a service or a client and shows its interactions and some major statistics.

Access

You may open the host details:

  • from the map tooltips
    HostAccess.png
  • or from any host name representation: in the grid, in communication details, in the dashboard...
    HostAccess2.png

When you open the details of a merged host, Spider will open all hosts details as different tabs.

Content

Screenshot

HostsDetails1.png
HostsDetails2.png

Map

The map is centered on the host and shows the various host it interacts with.

It offers the same features as the top panel map.

Identification

FieldDescription
IP addressIP address of the host
WhispererWhisperer that captured it
DNS nameThe name as given by the DNS
Spider nameThe name as shortened on capture, or renamed on it
First seenThe date this Whisperer has first seen the host
Last seenThe date it has last seen it

Workload

Workload.png

The hosts index carries no workload field of its own - a host is an IP, and the same IP can belong to different Kubernetes workloads over its lifetime. So this section is not a lookup: it is aggregated back out of the traffic captured for this host over the selected time span.

Each line reads workload · role · resolved by <tier> · count:

  • Workload - the Kubernetes workload seen behind this IP
  • Role - client or server
  • Resolution - the tier Spider resolved it at (workload, dns, cidr or ip)
  • Count - number of communications seen with that workload, in that role

More than one line for the same role is expected, not an error: when an IP was reused by different pods over the window, every workload that used it appears with its own count.

The section hides itself entirely when the current view carries no workload fields.

Global stats

It shows, for selected protocol, some statistics on bytes and items exchanged during the selected time.
It gives raw count and load (speed).

ColumnDescription
TotalIn + Out + Self - Includes headers
InPayload received
OutPayload sent
SelfPayload exchanged with itself

Errors (for HTTP view)

Gives a summary of errors during the period.

LineDescription
Total errorsSum of all errors
4xxResponses with status between 400 and 499
5xxResponses with status between 500 and 599
No responseWhen the server did not answer

Template stats

Gives statistics for the HTTP templates (API) over the period.

ColumnDescription
I/OShow the API call direction: In or Out
TemplateName of th template
CallsCount of calls
RateLoad of requests on this API
LatencyAverage latency
4xx4xx errors
5xx5xx errors
EmptyNo response