Kaspersky Container Security

Viewing information about network connections

Kaspersky Container Security can provide brief and detailed information about network connections.

To view brief information about a network connection:

Hover over the network connection of interest.

The solution will display a tooltip with the number of non-unique connections for each network connection type (for connections in Audit and Enforce modes and other connections).

To view detailed information about a network connection:

Click the connection of interest.

Kaspersky Container Security opens the sidebar with information about network connections for the selected connection.

The sidebar displays information about network connections for the 15 minutes before the sidebar was opened. Information about network connections is provided in form of tables in the tabs Audit-mode connections, Enforce-mode connections, Other connections. The number of connections is indicated next to tab names.

The tables have the same structure and contain the following information:

  • The Source column contains the name of the pod that is the sender of the network traffic and the IP address of the pod in the <pod IP address:outbound traffic port> format. You can click the link in the pod name to open a detailed description of the pod.
  • The Protocol column indicates the pod interaction protocol.
  • The Destination column contains the name of the pod that is the recipient of the network traffic and the IP address of the pod in the <pod IP address:inbound traffic port> format. You can click the link in the pod name to open a detailed description of the pod.
  • The Number of connections column displays the total number of non-unique connections between the sender and the recipient of the traffic.
  • The Last connection column displays the date and time of the last non-unique connection between the sender and the recipient of the traffic.

If the sender object or the recipient object is outside the relevant cluster, the Source or Destination columns display the domain name and IP address of such an object respectively (if the solution can obtain this information).