cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

What Is Flows

SOLVED
Highlighted
Here to help

What Is Flows

Hi

flows.pngCould someone tells us what the definition is for the column "Flows" please as we are unable to find a help definition to explain?  

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Kind of a big deal

Re: What Is Flows

The way I see it, every time a new TCP connection is established to a certain socket it's a new flow.

 

In your example connection towards TCP 443 on a facebook server it will be counted as a flow. So per client using facebook the number of flows will definitely go up, but one client might also have multiple flows if they make multiple connections to facebook (multiple browser tabs for example).

 

Whether the connections remain open or are closed each time depends on the application and type of flow. Google for example has a desktop app that keep certain flows open for the sync with Google Drive.

View solution in original post

3 REPLIES 3
Highlighted
Kind of a big deal

Re: What Is Flows

What is a flow?

A flow is defined by the firewall as one connection socket. Each port used in communication with each source-destination pair is one socket. For example, 10.1.1.1 on port 234 communicating with 10.2.2.2 on port 432 is one socket.

 

 

Source:

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Traffic_Analytics_and_the_Layer_7_F...

Highlighted
Here to help

Re: What Is Flows

Hi

 

So what triggers the count if you have one device only using say Facebook for a day and you have a count of around 200. Is it when they request a new page for example? 

 

Kind regards

 

John

 

Highlighted
Kind of a big deal

Re: What Is Flows

The way I see it, every time a new TCP connection is established to a certain socket it's a new flow.

 

In your example connection towards TCP 443 on a facebook server it will be counted as a flow. So per client using facebook the number of flows will definitely go up, but one client might also have multiple flows if they make multiple connections to facebook (multiple browser tabs for example).

 

Whether the connections remain open or are closed each time depends on the application and type of flow. Google for example has a desktop app that keep certain flows open for the sync with Google Drive.

View solution in original post

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.