NTA Top Talkers by Traffic Volume

What this query does

Identify top network talkers by total bytes transferred

SWQL Query

SELECT SrcAddr, DstAddr, SUM(Bytes) AS TotalBytes,
       SUM(Packets) AS TotalPackets, Protocol,
       COUNT(*) AS FlowCount
FROM Orion.Netflow.Records
WHERE DateTime >= ADDDATE('hour', -1, GETDATE())
GROUP BY SrcAddr, DstAddr, Protocol
ORDER BY TotalBytes DESC

NTA

netflow

traffic

top talkers

bandwidth

Unlock the full POLARISNOC hub

AI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.