Client behaviour - Application usage details explanation

GiuseppeR
GiuseppeR Posts: 463  Master Member
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

Hello everyone,

I have a client inside a network that seems to have something related to Avast:

immagine.png

In reality it is a domain client, without the possibility to install anything.

So I remotely connected to it looking for Avast traces but I did not see something reasonable considering the quick analysis.

Which sort of way of classification does Nebula use to identify "Application usage"?

How can I see if those 337MB are related to web traffic or server traffic? Like where is the origin of this traffic?

Nebula Tips & Tricks