Network Analysis

Deep visibility into firewall sessions, security threats, and top consumers of bandwidth powered by the Core Router API. This section provides real-time monitoring of active network connections, traffic analysis, and security threat detection.

Active Connections: View all active network connections where the source or destination matches an IP assigned to your server. Connections are automatically filtered to show only relevant traffic. The table supports sorting by any column and filtering by search terms.

Top Peers: Identify the endpoints that have the most connections and highest traffic volume. This helps you understand which IPs or domains are consuming the most bandwidth.

Top Ports: See which network ports are most active, helping you identify the services and protocols generating the most traffic.

Security: Monitor security threats by detecting connections to known malicious IPs from blocklists (Spamhaus DROPv6 for IPv6, blocklist.de for IPv4). Security warnings display the threat type, malicious IP, port, and connection details.

Export: All connection data can be exported to CSV format for further analysis, reporting, or archiving.

Deep visibility into firewall sessions, security threats, and top consumers of bandwidth powered by the Core Router API.

@if($networkAnalysisLoading || ($networkAnalysis['lastUpdated'] === null && $networkAnalysis['error'] === null))

Fetching data from Core Router... reload page

@elseif($networkAnalysis['error'])

Ensure the Core Router API credentials are configured in your environment.

@else

@if(($networkAnalysis['connectionCount'] ?? 0) == 0)

No matching connections tracked for this server.

@else

@foreach($this->paginatedConnections as $index => $connection) @php // Use raw bytes value from backend for reliable numeric sorting $bytesForSort = (int)($connection['bytes'] ?? 0); @endphp @endforeach

Direction	Protocol	Source	Destination	State	Traffic
@php $direction = $connection['direction'] ?? '—'; @endphp @if($direction !== '—') {{ $direction }} Direction: {{ $direction }} @else — @endif	@php $protocol = $connection['protocol'] ?? '—'; @endphp @if($protocol !== '—') {{ $protocol }} Protocol: {{ $protocol }} @else — @endif	@php $sourceIP = $connection['source'] ?? '—'; $isSourcePublic = $sourceIP !== '—' && $this->checkIsPublicIP($sourceIP); @endphp {{ $sourceIP }} @if($isSourcePublic) IP Address: {{ $sourceIP }} Loading location data... @endif @if(isset($connection['source_port'])) {{ $connection['source_port'] }} @endif	@php $destIP = $connection['destination'] ?? '—'; $isDestPublic = $destIP !== '—' && $this->checkIsPublicIP($destIP); @endphp {{ $destIP }} @if($isDestPublic) IP Address: {{ $destIP }} Loading location data... @endif @if(isset($connection['destination_port'])) {{ $connection['destination_port'] }} @endif	@php $state = $connection['state'] ?? '—'; @endphp @if($state !== '—') {{ $state }} Connection State: {{ $state }} @else — @endif	{{ $connection['bytes_human'] ?? '—' }} @if(isset($connection['packets'])) {{ number_format($connection['packets']) }} packets @endif

{{-- Connections Pagination Controls --}} @if(($networkAnalysis['connectionCount'] ?? 0) > 0)

Show: per page

Showing {{ (($connectionsCurrentPage - 1) * $connectionsPerPage) + 1 }} - {{ min($connectionsCurrentPage * $connectionsPerPage, $networkAnalysis['connectionCount'] ?? 0) }} of {{ $networkAnalysis['connectionCount'] ?? 0 }} connections

{{-- First page --}} {{-- Previous page --}} {{-- Page numbers --}} @php $connectionsTotalPages = $this->connectionsTotalPages; $startPage = max(1, $connectionsCurrentPage - 2); $endPage = min($connectionsTotalPages, $connectionsCurrentPage + 2); @endphp @if($startPage > 1) @if($startPage > 2) ... @endif @endif @for($i = $startPage; $i <= $endPage; $i++) @endfor @if($endPage < $connectionsTotalPages) @if($endPage < $connectionsTotalPages - 1) ... @endif @endif {{-- Next page --}} {{-- Last page --}}

@endif

@if(($networkAnalysis['topConnectionCount'] ?? 0) == 0)

No connection data available.

@else

@foreach($this->paginatedTopConnections as $index => $row) @php $endpointIP = $row['endpoint'] ?? '—'; $port = $row['port'] ?? 0; $connections = $row['count'] ?? 0; $bytes = $row['bytes'] ?? 0; $bytesForSort = $bytes; @endphp @endforeach

Endpoint	Port	Connections	Traffic
@php $isEndpointPublic = $endpointIP !== '—' && $this->checkIsPublicIP($endpointIP); @endphp {{ $endpointIP }} @if($isEndpointPublic) IP Address: {{ $endpointIP }} Loading location data... @endif	@if(isset($row['port']) && $row['port'] !== '—') {{ $row['port'] }} Port {{ $row['port'] }} Description @else — @endif	{{ number_format($row['count']) }}	{{ $row['bytes_human'] }} {{ number_format($row['packets']) }} packets

{{-- Top Connections Pagination Controls --}} @if(($networkAnalysis['topConnectionCount'] ?? 0) > 0)

Show: per page

Showing {{ (($topConnectionsCurrentPage - 1) * $topConnectionsPerPage) + 1 }} - {{ min($topConnectionsCurrentPage * $topConnectionsPerPage, $networkAnalysis['topConnectionCount'] ?? 0) }} of {{ $networkAnalysis['topConnectionCount'] ?? 0 }} peers

{{-- First page --}} {{-- Previous page --}} {{-- Page numbers --}} @php $topConnectionsTotalPages = $this->topConnectionsTotalPages; $startPage = max(1, $topConnectionsCurrentPage - 2); $endPage = min($topConnectionsTotalPages, $topConnectionsCurrentPage + 2); @endphp @if($startPage > 1) @if($startPage > 2) ... @endif @endif @for($i = $startPage; $i <= $endPage; $i++) @endfor @if($endPage < $topConnectionsTotalPages) @if($endPage < $topConnectionsTotalPages - 1) ... @endif @endif {{-- Next page --}} {{-- Last page --}}

@endif

@if(($networkAnalysis['topPortCount'] ?? 0) == 0)

No port statistics are available.

@else

@foreach($this->paginatedTopPorts as $index => $row) @php $port = $row['port'] ?? 0; $connections = $row['connections'] ?? 0; $bytes = $row['bytes'] ?? 0; $bytesForSort = $bytes; @endphp @endforeach

Port	Connections	Traffic
{{ $row['port'] }} Port {{ $row['port'] }} Description	{{ number_format($row['connections']) }}	{{ $row['bytes_human'] }} {{ number_format($row['packets']) }} packets

{{-- Top Ports Pagination Controls --}} @if(($networkAnalysis['topPortCount'] ?? 0) > 0)

Show: per page

Showing {{ (($topPortsCurrentPage - 1) * $topPortsPerPage) + 1 }} - {{ min($topPortsCurrentPage * $topPortsPerPage, $networkAnalysis['topPortCount'] ?? 0) }} of {{ $networkAnalysis['topPortCount'] ?? 0 }} ports

{{-- First page --}} {{-- Previous page --}} {{-- Page numbers --}} @php $topPortsTotalPages = $this->topPortsTotalPages; $startPage = max(1, $topPortsCurrentPage - 2); $endPage = min($topPortsTotalPages, $topPortsCurrentPage + 2); @endphp @if($startPage > 1) @if($startPage > 2) ... @endif @endif @for($i = $startPage; $i <= $endPage; $i++) @endfor @if($endPage < $topPortsTotalPages) @if($endPage < $topPortsTotalPages - 1) ... @endif @endif {{-- Next page --}} {{-- Last page --}}

@endif

@if(empty($networkAnalysis['security']))

No security threats detected. All connections appear to be safe.

@else

@foreach($networkAnalysis['security'] as $warning) @php $conn = $warning['connection'] ?? []; @endphp @php $riskLevel = $warning['risk_level'] ?? 'Medium'; $attackType = $warning['attack_type'] ?? 'Unknown Threat'; $riskDescription = $warning['risk_description'] ?? 'Malicious IP detected from blocklist'; $riskBadgeClass = match($riskLevel) { 'Critical' => 'bg-danger/20 text-danger border-danger/30', 'High' => 'bg-warning/20 text-warning border-warning/30', 'Medium' => 'bg-warning/10 text-warning border-warning/20', 'Low' => 'bg-base/10 text-base/70 border-base/20', default => 'bg-warning/10 text-warning border-warning/20', }; @endphp

Security Threat Detected {{ $warning['type'] }} {{ $riskLevel }} Risk {{ $attackType }} @if(isset($warning['quantity']) && $warning['quantity'] > 1) {{ $warning['quantity'] }}x Repeated @endif

{{ $warning['threat'] }} @if(isset($warning['quantity']) && $warning['quantity'] > 1) ({{ $warning['quantity'] }} similar connection{{ $warning['quantity'] > 1 ? 's' : '' }} detected) @endif

@php $threatIP = $warning['ip'] ?? '—'; $isThreatPublic = $threatIP !== '—' && $this->checkIsPublicIP($threatIP); @endphp

IP Address: {{ $threatIP }} @if($isThreatPublic)

@endif

Risk Analysis:

@if(isset($warning['mitigations']) && !empty($warning['mitigations']))

Suggested Mitigations:

@foreach(array_slice($warning['mitigations'], 0, 5) as $mitigation) @php $priorityColor = match($mitigation['priority'] ?? 'Medium') { 'Critical' => 'border-danger/30 bg-danger/5', 'High' => 'border-warning/30 bg-warning/5', 'Medium' => 'border-primary/30 bg-primary/5', 'Low' => 'border-base/20 bg-base/5', default => 'border-base/20 bg-base/5', }; $priorityText = match($mitigation['priority'] ?? 'Medium') { 'Critical' => 'text-danger', 'High' => 'text-warning', 'Medium' => 'text-primary', 'Low' => 'text-base/70', default => 'text-base/70', }; @endphp

@endforeach @if(count($warning['mitigations']) > 5)

+ {{ count($warning['mitigations']) - 5 }} more mitigation suggestion{{ count($warning['mitigations']) - 5 > 1 ? 's' : '' }} available

@endif

@if(isset($conn['protocol']))

Protocol: {{ $conn['protocol'] }}

@endif @if(isset($conn['destination']))

{{ $warning['type'] === 'source' ? 'Destination' : 'Source' }}: {{ $warning['type'] === 'source' ? $conn['destination'] : $conn['source'] }} @if(isset($conn[$warning['type'] === 'source' ? 'destination_port' : 'source_port'])) :{{ $conn[$warning['type'] === 'source' ? 'destination_port' : 'source_port'] }} @endif

@endif @if(isset($conn['bytes_human']))

Traffic: {{ $conn['bytes_human'] }}

@endif

@endforeach

@endif

Network Analysis

Network Analysis

Direction: {{ $direction }}

Protocol: {{ $protocol }}

IP Address: {{ $sourceIP }}

IP Address: {{ $destIP }}

Connection State: {{ $state }}

IP Address: {{ $endpointIP }}

Port {{ $row['port'] }} Description

Port {{ $row['port'] }} Description

IP Address: {{ $threatIP }}