NTA Feature Request

Donald_Francis

I think it would be useful for the top xx conversations resource to show the port numbers.  Seeing the ports could be a great indicator of suspicious traffic going on with just a single glance.

As mentioned earlier I too would also like to see "Random High Port" go away ad replaced with the actual report.

 

As time goes on I find myself using NTA for forensic analysis more and more.

chris.lapoint

Currently, we store only the lowest port in a conversation and assign the other random high for performance reasons.   We are looking at how we can adjust our algorithm and store both ports for all conversations while still maintaining performance so stay tuned.

For internal folks, we're tracking this as #3106.