Understanding the External Host Inventory

Internal hosts are defined as any host inside the tap, and hosts directly connected to a router adjacent to the tap. Such hosts will be part of a broadcast domain. Any host not associated with a broadcast domain is considered external and can be found in the External Hosts panel. Much like the Inventory panel, the table can be sorted, searched, and exported and rows can be clicked on to reveal additional information about the selected host.

Columns

The External Hosts table contains the following columns:

COLUMN DESCRIPTION
Name Host IP address or business name
Address Host IP address(es)
Tags User tags or GreyNoise tags associated with host
Port The destination port(s) this host utilized
Hop Count The number of intermediate devices packet must pass between source and destination
Country The host country of origin
Region The host region or state
City The host city of origin
ASN Route Unique number of autonomous system
Form Factor Device type
OS Operating System
Model Device model
Manufacturer Manufacturer of physical device
Roles The function of this host
Notes User-specified notes about host

Search

Each column within the table can be searched. Simply enter the desired value within the search text field.

Grouping

The table can be grouped by the following values:

  • Country
  • Hostname
  • Tags
  • Vendor

Export

The entire table can be exported by selecting the Export Host List (CSV) button.

View Settings

Users can change the visible columns by accessing the View Settings dropdown.

Customizing

By default, all detected hosts that are not associated with a broadcast domain are considered to be external.

  • To modify your broadcast domain select your project toolbar in the top left ➜ Customize Internal/External Hosts and add the subnets you would like to be included as internal.
TABLE OF CONTENTS