The Filter Pane
Use the Filter pane to limit the endpoints you want to view in the Endpoints pane. Choose a combination of switch, VLAN and NIC Manufacturer to select the devices you want to view.
The Switches section lists each switch by name, and shows the number of endpoints attached to that switch.
The VLANs section lists all VLANs and the number of endpoints on each.
The NIC Manufacturers section lists all unique NIC Manufacturers connected to devices.
The right column of the Filter Pane shows a count of endpoints present for each of the criteria. See Understanding Endpoint Counts{} for more information.
Use these methods to control the filter criteria:
- By default, all check boxes are selected.
- Select or clear check boxes to get the combination of switch, VLAN, and NIC Manufacturer that matches the devices you want to view.
- Double-click a check box to select it and clear all other check boxes in the section.
- Expand the Switch tree to view and select switch ports.
- Right-click a switch and choose Remove switch from Layer 2 database to prevent the switch from being polled for Layer 2 information. This is equivalent to the Poll this address for Layer 2 information check box, available in the Set Behavior window.
- Expand the VLANs tree to view and select VLANs.
- Expand the NIC Manufacturer tree to view and select NIC models from those available.
- Select or clear the Show all ports box to show or hide the ports to which in the Endpoints pane to which nothing is connected.
- Use the Filter Control (see below) for additional control of the set of rows that are displayed in the Endpoints pane.
- The Filter box provides significant addtional filtering capability. Enter a hostname or address in the Filter box to limit the devices shown in the Endpoints pane. See Using the Filter Box{} below for many more options.
- Certain flags appear next to entries. See Understanding Layer 2 Flags{}.
- A switch that appears in grey and in parentheses indicates that the switch was previously detected, but is no longer on a Layer 2-enabled map.
Understanding Endpoint Counts
The right column of the Filter pane shows the number of Endpoint devices (specifically, the number of distinct MAC addresses) for each of the filter criteria.
- An SNMP-enabled managed switch or hub appears as zero endpoints, since it is not considered an endpoint.
- A single endpoint (host, workstation, server, router, etc.) will show as one endpoint.
- If an unmanaged hub or switch is present, or if the switch is not present on a Layer 2-enabled map, the endpoint count reflects the number of endpoints detected “out that port”. In some cases, this may be a very large number of endpoints.
The number of endpoints indicated in the Filters panel often exceeds the number of entries in the Endpoints pane. This discrepancy occurs because the Endpoints panel often displays multiple entries for the same MAC address. Multiple entries appear in the following cases:
- Multi-homed devices - devices with multiple IP addresses that use a single MAC address. The flag at right appears.
- Interior devices - devices attached to an unmanaged switch or hub that is placed between two managed switches. InterMapper’s Layer 2 algorithm cannot show the correct switch port (because it’s unmanaged), so it indicates the device as an "interior" device – between two managed switches. Interior devices are indicated with left or right arrows as shown at right.
When you select the Show All Ports box, the Endpoints pane also shows:
- All ports, whether a device is connected or not
- Ports that are connected to other switches. (Normally these are hidden because switches are not considered endpoints.)
- Fuzzy devices (any device whose connection point cannot be completely determined.)
For more information, see Understanding Layer 2 Flags{}.
Using the Filter Box
Use the Filter box, located at the top of the Device Filter pane, to limit the devices you see in the Endpoints pane.
- Enter a host name or address to view only devices connected to that domain or address.
- From the Filter dropdown menu, select or clear Endpoints Only to include or exclude entries for ports with switches, unknown devices, and devices identified as "fuzzy" (see Understanding Fuzzy Devices{}.)
- In the Map or List view, select a device, then choose in Layer 2 from the Show submenu, available from the Monitor menu and the context menu, to view that device's connections in the Layer 2 View.
- If the value is in double-quotes, list all endpoints where the value is part of the NIC Manufacturer. (e.g. "App" will match "Apple", "Appliance", etc.)
- If the value is an IPv4 CIDR block, list all endpoints with IP addresses in that CIDR block. (For example, enter "192.168.1.1/24")
- If the value is decimal digits separated by periods, or just digits, treat it as an IPv4 address. There are three forms:
- 192.168 matches any IP address that begins with 192.168
- .1 matches any IP address that ends with .1
- 10 matches any IP address that begins with 10. (no period necessary).
- If the value is hexadecimal and separated by dashes, treat it as a MAC address. Search for endpoints with the MAC address or MAC address substring. (e.g. "00-00-0c", "00-00-d7-00-10-ab")
- If the value starts with an alphabetical character, resolve the host name to an IPv4 address and filter on that IP address.
- If the value starts with '#', process the specified debug command (e.g. "#help")