I've been tasked in testing NTA for our Production environment.
one of the tasks which are required for NTA is to provide a simple report that will show the top "x" destinations + ports which were in use in a time frame.
I manage to come out only with this option, the downside of this output is that there are a lot of blank lines:
also when I export it to xls file - it provides the duplicates which I definitely don't want -
can someone guide me how to create a report that will show top 200 destination IP + ports that are being used.
of course I don't need duplicate information - for example 72.163.55.106 should be shown only once.
BUT - if possible to have a count on how many time this destination has been in use that would be very useful (and I'd like to create the order that way).
please help !!!