Kerio Network Monitor allows to define network services, which will be monitored in detail. For this purpose serves the Services tab in the configuration dialog.
- List of services
The window shows the list of the defined services (in the default settings, there is already predefined the majority of the standard services). The columns of the list have the following meaning:
Service — name of the service (given by its definition)
Protocol — protocol, which the service uses (TCP, UDP, ICMP, PPTP or any— All)
Port / Subprotocol — port, which is used by the service (only for the TCP and UDP protocols)
Flags (flags) — indication of other parameters, which were set for the service. Details see later.
The buttons under the list of the services allow definition of new service (Add), modification of the service settings (Edit) or deleting of the service (Remove).
The arrow buttons (up / down) serve for ordering the services in the list. This order is important only for better orientation; it has no influence to the function of the program.
Note: With some of the predefined services (HTTP, SMTP, POP3, IMAP4, FTP and DNS) are connected some other functions of Kerio Network Monitor, and therefore they can not be removed.
After pressing the Add or Edit button, the dialog for service definition will be shown:
- All traffic of ... protocol type
Protocol, which is used by the given service. The possibilities are: TCP, UDP, ICMP (Internet Control Messages Protocol), PPTP (Point to Point Tunneling Protocol ) and All (any protocol — i.e. whole IP communication).
- with port / subprotocol number
Port number, which is used by the service (e.g. 25 = SMTP, 80 = WWW etc.). The value0 (zero) means all ports (i.e. all communication with the selected port).
- Allow protocol statistics
Separate logging of the data for this service. In the graph or in the report, it will be possible to separately display the volume of the date transferred only by this service (for details see the chapters 7.2, 7.6).
If this option is on, attribute S appears in the column Flags.
- Do the detailed protocol analysis
Performs the detailed analysis of this service. This option is available only for the standard services, where Kerio Network Monitor can perform the analysis (HTTP, SMTP, POP3, IMAP4, FTP and DNS). The analysis results (i.e. e.g. captured WWW pages, E-mail messages, transferred files, etc.) are displayed to the Scanned data window, or possibly also to the appropriate log (HTTP Log, Mail Log, ICQ Log). Details are to be found in the chapters 7.4 and 7.7.
If this option is on, attribute P appears in the column Flags.
Note: To define other parameters for protocol analysis use the Others option. To see their detailed description refer to chapter 6.7.
- Enable protocol debugger
Detailed log of data for this service for purposes of technical support. This option can be used if you suspect that Kerio Network Monitor does not log the data of appropriate service correctly. Obtained data can be handed to technical support of the Kerio Technologies for further analysis.
If this option is on, attribute D appears in the column Flags.
- Do not delete the debug information
The detailed data of the service, stored for debugging purposes (see the previous option), are rather large and could very quickly fill in considerable amount of disk space. Therefore they are under normal conditions deleted on each close of the monitored connection. By setting this option on, the data will not be deleted automatically and will remain stored until manually deleted.