I've noticed some unexpected network activity in the Network Intelligence Center (NIC) but cannot find the details such as source ip address. Do I have to query network flow logs for this? It seems like there ought to be a drill down in NIC for this.

More details, by-request.... In the Network Topology tool I found an vm/node in our Google Cloud GCE project that was being accessed from another country with significant number for the rate of bytes transferred (out). That connection is outside the norm, hence I found it suspicious. And, I want to know more about the connection: for example, and IP address

  • Could you please elaborate your issue as the information provided is not sufficient. In the meantime please have a look into this troubleshooting document. Mar 15 at 10:20
  • I've read all of the docs for NIC and there is no mention of how to drill down to specifics in the Network Topology Tool
    – Rondo
    Mar 17 at 4:34
  • Go to the Network Topology and click on them. You will get further details. As resources are shared you are experiencing activity from different regions.. Please check the screenshot. Mar 19 at 4:28
  • By 'specifics' I mean finding actionable information such as source ip addresses (edit: fixed misspell)
    – Rondo
    Mar 20 at 19:37
  • 1
    yes, I know about those things. And I have already identified the connection in other logs. This question was about NIC. I'll let someone else create a feature request for it. Thanks
    – Rondo
    Mar 23 at 2:28


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.