Top inbound hosts by flows



Machine:129.252.41.133813 hosts touched 
 2008/05/17 12:43:58 ->2008/05/17 12:49:43   
 FLOWS: 36872 ( 10.36%)  
 PKTS: 73282 ( 1.71%)  
 BYTES: 7170288 ( 0.33%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (8906)/udp 36872 73282 7170288
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (1112)/udp 17 33 3080
  (2496)/udp 17 33 3028
  (1177)/udp 16 32 3104
  (1098)/udp 16 31 2790
  (1092)/udp 16 30 2663
  (3611)/udp 16 32 3020
  (2498)/udp 16 32 3058
  (2502)/udp 15 30 2818
  (1161)/udp 15 30 2856
  (2490)/udp 15 30 2846


Machine:129.252.189.328872 hosts touched 
 2008/05/17 12:43:59 ->2008/05/17 12:49:57   
 FLOWS: 15606 ( 4.39%)  
 PKTS: 166431 ( 3.89%)  
 BYTES: 19909882 ( 0.93%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 12444 128577 16792130
  http (80)/tcp 233 7878 657681
  auth (113)/tcp 163 339 19576
  (36276)/tcp 12 22 1475
  (33955)/tcp 7 202 11451
  (37726)/tcp 7 14 920
  11 0/icmp 6 10 560
  3 1/icmp 6 6 496
  (57457)/tcp 6 15 1166
  (49234)/tcp 6 17 837
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 2707 29534 2433456
  (6570)/tcp 23 23 920
  (2187)/tcp 8 28 1495
  (1791)/tcp 8 57 11680
  (3336)/tcp 8 38 4248
  (4692)/tcp 8 31 3875
  (3985)/tcp 8 25 1982
  (3689)/tcp 7 20 1526
  (4038)/tcp 7 18 892
  (4113)/tcp 7 36 4496


Machine:129.252.59.2317227 hosts touched 
 2008/05/17 12:43:55 ->2008/05/17 12:49:58   
 FLOWS: 10517 ( 2.96%)  
 PKTS: 30425 ( 0.71%)  
 BYTES: 4796407 ( 0.22%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 10441 30123 4762137
  3 3/icmp 31 159 14503
  3 1/icmp 11 35 2526
  0 0/icmp 11 63 5956
  domain (53)/tcp 9 9 576
  8 0/icmp 8 21 9960
  3 10/icmp 2 2 191
  (33438)/udp 1 4 128
  netbios-ns (137)/udp 1 1 78
  11 0/icmp 1 4 224
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 10435 30101 4760379
  3 3/icmp 31 159 14503
  3 1/icmp 11 35 2526
  0 0/icmp 11 63 5956
  8 0/icmp 8 21 9960
  (9052)/udp 3 3 614
  (60771)/udp 2 18 1062
  (10275)/udp 2 8 256
  3 10/icmp 2 2 191
  (43693)/udp 1 1 78


Machine:129.252.152.1056328 hosts touched 
 2008/05/17 12:43:57 ->2008/05/17 12:49:57   
 FLOWS: 9874 ( 2.77%)  
 PKTS: 108606 ( 2.54%)  
 BYTES: 15294619 ( 0.71%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 9850 108217 15274521
  0 0/icmp 4 10 582
  (5737)/tcp 2 28 1288
  (5838)/tcp 1 13 867
  3 1/icmp 1 1 56
  netbios-ns (137)/udp 1 3 234
  3 3/icmp 1 1 56
  (5819)/tcp 1 11 1050
  (35586)/tcp 1 1 46
  (5832)/tcp 1 16 949
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 14 363 18536
  (3890)/tcp 8 41 6162
  (4739)/tcp 7 17 838
  (3954)/tcp 7 20 2054
  (4711)/tcp 7 17 807
  (3351)/tcp 7 36 2012
  (62075)/tcp 7 16 760
  (3759)/tcp 6 13 613
  (4203)/tcp 6 44 5568
  (3631)/tcp 6 97 8683


Machine:129.252.189.115798 hosts touched 
 2008/05/17 12:43:55 ->2008/05/17 12:49:53   
 FLOWS: 8250 ( 2.32%)  
 PKTS: 19180 ( 0.45%)  
 BYTES: 3028949 ( 0.14%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (32768)/udp 7049 17514 2904057
  domain (53)/udp 1143 1509 103669
  3 3/icmp 13 29 2191
  11 0/icmp 11 58 3289
  8 0/icmp 7 8 12000
  3 1/icmp 6 18 1182
  0 0/icmp 6 13 1114
  domain (53)/tcp 5 10 520
  ntp (123)/udp 3 3 228
  (33438)/udp 1 4 128
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 7126 17625 2911685
  (32768)/udp 67 86 5978
  (32769)/udp 21 30 2107
  (5353)/udp 17 22 1820
  3 3/icmp 13 29 2191
  (32771)/udp 12 17 1174
  11 0/icmp 11 58 3289
  (32776)/udp 8 14 999
  (5301)/udp 8 12 848
  (9253)/udp 8 8 563


Machine:129.252.42.255114 hosts touched 
 2008/05/17 12:43:56 ->2008/05/17 12:49:54   
 FLOWS: 7576 ( 2.13%)  
 PKTS: 18355 ( 0.43%)  
 BYTES: 2710920 ( 0.13%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 7456 17835 2672189
  domain (53)/tcp 43 126 5472
  8 0/icmp 28 175 13872
  3 3/icmp 18 134 13155
  11 0/icmp 8 37 2072
  0 0/icmp 5 7 908
  traceroute(33434)/udp 5 5 140
  3 1/icmp 4 19 1110
  ntp (123)/udp 3 3 228
  (0)/udp 2 6 1448
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 4187 12884 2078223
  (32768)/udp 104 173 12268
  (32769)/udp 45 112 8028
  (5353)/udp 29 181 17282
  8 0/icmp 28 175 13872
  (32771)/udp 18 27 1757
  3 3/icmp 18 134 13155
  (32770)/udp 18 39 2721
  (5302)/udp 14 45 3244
  (32773)/udp 12 12 824


Machine:129.252.41.114530 hosts touched 
 2008/05/17 12:43:57 ->2008/05/17 12:49:58   
 FLOWS: 6461 ( 1.82%)  
 PKTS: 14187 ( 0.33%)  
 BYTES: 1900086 ( 0.09%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 6379 13846 1882270
  8 0/icmp 20 127 6640
  domain (53)/tcp 19 46 2332
  0 0/icmp 11 68 3236
  3 3/icmp 9 25 1832
  traceroute(33434)/udp 9 9 252
  11 0/icmp 6 32 1792
  3 1/icmp 3 19 1118
  ntp (123)/udp 2 2 152
  (49153)/udp 1 1 78
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  domain (53)/udp 3298 9535 1588623
  (32768)/udp 109 167 11793
  (32769)/udp 44 112 7918
  (5353)/udp 34 200 18572
  8 0/icmp 20 127 6640
  (32773)/udp 16 19 1196
  (32770)/udp 15 33 2310
  (32772)/udp 15 16 1094
  (5302)/udp 12 35 2540
  (32771)/udp 11 15 1102


Machine:129.252.191.94054 hosts touched 
 2008/05/17 12:43:59 ->2008/05/17 12:49:56   
 FLOWS: 6030 ( 1.69%)  
 PKTS: 62437 ( 1.46%)  
 BYTES: 7845532 ( 0.36%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 6019 62425 7844838
  3 3/icmp 7 7 392
  3 13/icmp 2 2 112
  3 1/icmp 1 2 112
  netbios-ns (137)/udp 1 1 78
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (1513)/tcp 9 49 4305
  (3918)/tcp 8 32 5432
  (2807)/tcp 7 17 859
  (1757)/tcp 7 33 2351
  (52045)/tcp 7 8 328
  3 3/icmp 7 7 392
  (1055)/tcp 7 23 3415
  (3174)/tcp 6 56 4981
  (21305)/tcp 6 13 618
  (3112)/tcp 6 47 4207


Machine:129.252.117.2023577 hosts touched 
 2008/05/17 12:43:56 ->2008/05/17 12:49:56   
 FLOWS: 5882 ( 1.65%)  
 PKTS: 62579 ( 1.46%)  
 BYTES: 7480254 ( 0.35%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 5774 62252 7459003
  (26171)/tcp 4 4 176
  3 13/icmp 3 8 592
  (26263)/tcp 2 11 863
  (26252)/tcp 2 11 723
  (26246)/tcp 2 11 723
  (26258)/tcp 2 11 723
  (26279)/tcp 2 11 857
  (26264)/tcp 2 11 863
  (0)/tcp 2 6 295
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 98 303 19944
  (1821)/tcp 11 28 1417
  (2464)/tcp 8 17 819
  (2608)/tcp 6 25 3425
  (2890)/tcp 6 31 1661
  (2539)/tcp 6 9 368
  (1509)/tcp 6 32 2973
  (1159)/tcp 6 9 368
  (2684)/tcp 5 13 643
  (22573)/tcp 5 15 914


Machine:129.252.158.132075 hosts touched 
 2008/05/17 12:44:01 ->2008/05/17 12:49:58   
 FLOWS: 5472 ( 1.54%)  
 PKTS: 93312 ( 2.18%)  
 BYTES: 17134195 ( 0.80%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 5461 93284 17132465
  3 1/icmp 4 4 356
  8 0/icmp 2 2 120
  5 1/icmp 1 16 896
  (49153)/udp 1 1 78
  3 3/icmp 1 1 56
  3 13/icmp 1 1 56
  11 0/icmp 1 3 168
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (1942)/tcp 12 61 8571
  (1900)/tcp 9 53 7418
  (1905)/tcp 7 23 2609
  (4722)/tcp 6 43 7156
  (8448)/tcp 6 16 1350
  (53744)/tcp 6 159 81863
  (1902)/tcp 6 21 1042
  (1293)/tcp 5 48 6489
  (2833)/tcp 5 62 11401
  (2425)/tcp 5 28 3522



 Top:112540 flows648794 pkts83.2282371520996 MB
 All:355851 flows4273774 pkts2051.05620574951 MB


 Top FLOWS: 112540 ( 31.63%)  
 Top PKTS: 648794 ( 15.18%)  
 Top BYTES: 83.23 MB ( 4.06%)