NPM Dashboards

The NPM dashboard provides comprehensive visibility into network traffic and performance. It helps monitor, analyze, and troubleshoot data flows by offering detailed insights into protocols like HTTP, TCP, TLS, DNS, and SMB. This enables efficient detection of issues, performance bottlenecks, and potential security risks across the network.

The different categories and its visualizations details of NPM dashboards are as follows:

Category	Visualizations	Overview
	Total Bytes	Displays the volume of traffic (in bytes) sent and received over the monitored links.
	Total Bytes over Time	Displays a time-line chart of the bytes sent and received.
Traffic Volume-Specific View	Traffic Visualization by Application	Displays a bar chart of frequently used applications and protocols.
	Traffic Volume	Displays a time-line chart of aggregate traffic.
	Traffic Visualization by Servers	Displays the servers' activity.
	Traffic Visualization by Clients	Displays the users' activity.
Detailed View of HTTP Traffic	Top HTTP records	Displays the user activity across HTTP servers.
	HTTP Status Codes	Displays client-side and server-side HTTP errors.
	HTTP User Agents	Displays different user agents, including browser types and versions.
	HTTP URI's	Displays the list of widely visited domains.
	Detailed HTTP transactions	Displays additional context for HTTP transactions, including the timestamp, endpoint details, HTTP URl, method, host, and referrer.
Detailed View of TCP Traffic	Top Source IPs	Displays the top source IPs based on user activity.
	Round Trip Time	Displays the overall trend of round-trip time.
	Retransmission Bytes	Displays the overall trend of retransmitted bytes.
	Bytes Total Vs Lost	Displays the overall trend of total bytes transmitted and lost.
Detailed View of TLS Traffic	SSL Certificates	Displays domains using SSL/TLS certificates.
	SSL Cipher suites	Displays the list of widely used SSL/TLS cipher suites.
	Expired TLS Certificate Details	Displays host IP address and key certificate details of servers using expired certificates.
	SSL Certificate Issuer	Displays the SSL/TLS certificate issuer details.
	Detailed TLS communications	Displays additional context for SSL/TLS sessions, including the timestamp, endpoint details, domain name, certificate issuer, and cipher suite in use.
Detailed View of DNS Traffic	Average DNS response time over time	Displays a time-line chart of the number of DNS requests made per domain over time.
	DNS Query over time	Displays a time-line chart of the number of DNS queries made for each domain.
	Top DNS Clients	Displays the most active users making DNS queries.
	Top DNS Servers	Displays the top DNS servers based on the number of DNS queries handled by each server.
	Top DNS Query Type	Displays the count of top DNS query types exchanged between endpoints.
	Top Queried DNS Domains	Displays the breakdown of the most frequently queried domains by users.
Detailed View of SMB Traffic	SMB Commands	Displays the SMB commands currently in use.
	SMB Servers	Displays the SMB servers that are currently active.
	SMB Clients	Displays the list of clients using SMB.
	Connections per SMB version	Displays the total number of active SMB versions.
	Detailed SMB conversation	Displays a detailed view of SMB traffic, including file paths, filenames, hosts, and endpoints, supporting file-sharing monitoring, unauthorized access detection, and troubleshooting.