Top inbound hosts by packets




Machine:129.252.189.328872 hosts touched 
 2008/05/17 12:43:59 ->2008/05/17 12:49:57   
 FLOWS: 15606 ( 4.39%)  
 PKTS: 166431 ( 3.89%)  
 BYTES: 19909882 ( 0.93%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 12444 128577 16792130
  http (80)/tcp 233 7878 657681
  auth (113)/tcp 163 339 19576
  (33955)/tcp 7 202 11451
  (35768)/tcp 1 93 6659
  (52253)/tcp 1 66 3847
  (52548)/tcp 2 56 3285
  (59172)/tcp 1 51 3368
  (34406)/tcp 5 48 2953
  (49562)/tcp 2 46 3726
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 2707 29534 2433456
  (49248)/tcp 3 2974 236454
  (62953)/tcp 2 2214 173524
  (4159)/tcp 2 238 12561
  (58787)/tcp 1 177 81345
  (63991)/tcp 1 163 13147
  (56698)/tcp 1 155 70839
  (58163)/tcp 4 137 63094
  (60209)/tcp 1 105 46929
  (53234)/tcp 2 104 38041


Machine:129.252.37.3269 hosts touched 
 2008/05/17 12:44:03 ->2008/05/17 12:49:55   
 FLOWS: 473 ( 0.13%)  
 PKTS: 110225 ( 2.58%)  
 BYTES: 5256985 ( 0.24%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  http (80)/tcp 470 110218 5256209
  smtp (25)/tcp 1 5 296
  ntp (123)/udp 1 1 76
  ms-sql-m (1434)/udp 1 1 404
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (1148)/tcp 5 16940 779246
  (1124)/tcp 4 14127 649842
  (1163)/tcp 3 13515 622251
  (1166)/tcp 2 8459 389659
  (1151)/tcp 3 7611 350668
  (1142)/tcp 3 7441 342286
  (1157)/tcp 2 6944 319978
  (1133)/tcp 2 6034 277564
  (1107)/tcp 2 5416 249136
  (1250)/tcp 2 4760 219513


Machine:129.252.152.1056328 hosts touched 
 2008/05/17 12:43:57 ->2008/05/17 12:49:57   
 FLOWS: 9874 ( 2.77%)  
 PKTS: 108606 ( 2.54%)  
 BYTES: 15294619 ( 0.71%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 9850 108217 15274521
  (5808)/tcp 1 216 8952
  (5737)/tcp 2 28 1288
  (5812)/tcp 1 20 1124
  (5832)/tcp 1 16 949
  (5845)/tcp 1 16 1206
  (5838)/tcp 1 13 867
  (5819)/tcp 1 11 1050
  (5821)/tcp 1 11 733
  (5844)/tcp 1 11 637
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 14 363 18536
  (2629)/tcp 5 309 172776
  (2930)/tcp 2 263 21509
  (1077)/tcp 3 199 17781
  (39895)/tcp 5 177 251340
  (2653)/tcp 3 173 16232
  (2821)/tcp 2 137 56951
  (4088)/tcp 1 122 45482
  (57835)/tcp 1 122 62876
  (56691)/tcp 1 121 62378


Machine:129.252.158.132075 hosts touched 
 2008/05/17 12:44:01 ->2008/05/17 12:49:58   
 FLOWS: 5472 ( 1.54%)  
 PKTS: 93312 ( 2.18%)  
 BYTES: 17134195 ( 0.80%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 5461 93284 17132465
  5 1/icmp 1 16 896
  3 1/icmp 4 4 356
  11 0/icmp 1 3 168
  8 0/icmp 2 2 120
  (49153)/udp 1 1 78
  3 3/icmp 1 1 56
  3 13/icmp 1 1 56
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (11558)/tcp 2 1158 1556582
  (60431)/tcp 2 465 113509
  (58130)/tcp 2 181 84645
  (1706)/tcp 1 163 118885
  (54555)/tcp 3 161 82972
  (58383)/tcp 1 160 82323
  (50330)/tcp 1 160 82479
  (51523)/tcp 2 159 81824
  (51945)/tcp 1 159 81968
  (53744)/tcp 6 159 81863


Machine:129.252.41.133813 hosts touched 
 2008/05/17 12:43:58 ->2008/05/17 12:49:43   
 FLOWS: 36872 ( 10.36%)  
 PKTS: 73282 ( 1.71%)  
 BYTES: 7170288 ( 0.33%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (8906)/udp 36872 73282 7170288
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (1112)/udp 17 33 3080
  (2496)/udp 17 33 3028
  (1177)/udp 16 32 3104
  (3611)/udp 16 32 3020
  (2498)/udp 16 32 3058
  (1098)/udp 16 31 2790
  (2502)/udp 15 30 2818
  (1161)/udp 15 30 2856
  (2490)/udp 15 30 2846
  (4257)/udp 15 30 2818


Machine:129.252.68.14163 hosts touched 
 2008/05/17 12:43:57 ->2008/05/17 12:49:58   
 FLOWS: 882 ( 0.25%)  
 PKTS: 66923 ( 1.57%)  
 BYTES: 62442075 ( 2.90%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (3851)/udp 313 52798 54304063
  (1849)/tcp 5 5836 5391603
  (1085)/udp 72 2394 136369
  (1680)/tcp 2 856 882294
  (3761)/tcp 5 437 403741
  (3646)/tcp 5 433 236847
  (1954)/tcp 5 385 356077
  (3972)/tcp 5 357 211748
  (1460)/udp 32 355 20141
  (3463)/tcp 5 347 15183
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (11674)/udp 5 13352 17169695
  (7981)/udp 5 9433 12297004
  (13317)/udp 8 9166 11428676
  (41676)/tcp 5 5836 5391603
  (14353)/udp 5 4273 4527620
  (35145)/udp 5 2987 2694527
  (11752)/udp 1 1458 1948299
  (26994)/tcp 7 1293 1286035
  http (80)/tcp 64 1273 690198
  (11025)/udp 5 1130 352395


Machine:129.252.117.2023577 hosts touched 
 2008/05/17 12:43:56 ->2008/05/17 12:49:56   
 FLOWS: 5882 ( 1.65%)  
 PKTS: 62579 ( 1.46%)  
 BYTES: 7480254 ( 0.35%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 5774 62252 7459003
  (26244)/tcp 1 15 1079
  (26285)/tcp 1 14 884
  (26263)/tcp 2 11 863
  (26252)/tcp 2 11 723
  (26273)/tcp 1 11 904
  (26246)/tcp 2 11 723
  (26271)/tcp 1 11 901
  (26258)/tcp 2 11 723
  (26279)/tcp 2 11 857
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 98 303 19944
  (50794)/tcp 1 199 11185
  (1665)/tcp 4 165 12458
  (1545)/tcp 2 164 15640
  (37134)/tcp 2 149 43081
  (46094)/tcp 2 119 32905
  (51545)/tcp 1 113 9586
  (2321)/tcp 2 104 10132
  (4874)/tcp 1 100 17093
  (2209)/tcp 1 98 40977


Machine:129.252.191.94054 hosts touched 
 2008/05/17 12:43:59 ->2008/05/17 12:49:56   
 FLOWS: 6030 ( 1.69%)  
 PKTS: 62437 ( 1.46%)  
 BYTES: 7845532 ( 0.36%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  smtp (25)/tcp 6019 62425 7844838
  3 3/icmp 7 7 392
  3 13/icmp 2 2 112
  3 1/icmp 1 2 112
  netbios-ns (137)/udp 1 1 78
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (62387)/tcp 1 158 9777
  (50792)/tcp 3 120 52059
  (55038)/tcp 1 106 46816
  (2871)/tcp 2 100 10210
  (4679)/tcp 2 96 5722
  (3482)/tcp 3 89 4716
  (4760)/tcp 2 87 4670
  (56679)/tcp 1 86 21784
  (27789)/tcp 1 84 35942
  (58784)/tcp 1 80 34749


Machine:129.252.209.77175 hosts touched 
 2008/05/17 12:43:58 ->2008/05/17 12:49:59   
 FLOWS: 856 ( 0.24%)  
 PKTS: 56291 ( 1.32%)  
 BYTES: 47040448 ( 2.19%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (3851)/udp 296 50611 46441852
  (1085)/udp 76 2576 146832
  http (80)/tcp 241 673 34247
  (1460)/udp 24 259 14779
  3 3/icmp 10 235 19010
  (4579)/tcp 5 163 7537
  (4618)/tcp 3 128 71114
  (1555)/tcp 4 103 47780
  (3757)/tcp 5 98 3936
  (4408)/udp 14 96 5472
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (24341)/udp 7 12752 10658627
  (35385)/udp 5 12301 16104446
  (15000)/udp 68 2558 1387523
  (33735)/udp 5 2327 3119182
  (35152)/udp 5 2215 1699206
  (44545)/udp 4 1967 2359320
  (16447)/udp 5 1914 2618216
  (8000)/udp 45 1664 1566839
  (15682)/udp 5 1147 696253
  (9901)/udp 5 1088 1383869


Machine:129.252.70.40704 hosts touched 
 2008/05/17 12:43:56 ->2008/05/17 12:49:55   
 FLOWS: 1738 ( 0.49%)  
 PKTS: 50821 ( 1.19%)  
 BYTES: 50473700 ( 2.35%)  
All Destination Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  (32050)/tcp 2 18060 23472217
  (32740)/tcp 1 3666 4760776
  (32619)/tcp 1 1238 1605891
  (31969)/tcp 3 699 871170
  (31588)/tcp 3 585 722694
  (32089)/tcp 3 552 659592
  (31970)/tcp 3 516 619238
  (37295)/udp 1 489 134598
  (32522)/tcp 1 475 612470
  (32174)/tcp 1 418 527010
All Source Ports:    
 PORT/PROTOFLOWSPKTSBYTES
  http (80)/tcp 967 42492 48210303
  https (443)/tcp 68 885 704386
  (17178)/udp 1 489 134598
  (20116)/udp 2 469 38224
  (22969)/udp 3 388 29283
  (13779)/udp 3 370 167613
  (39354)/udp 1 357 313994
  (15000)/udp 22 300 26083
  (12152)/udp 1 209 250151
  (25377)/udp 1 198 73300



 Top:83685 flows850907 pkts228.927591323853 MB
 All:355851 flows4273774 pkts2051.05620574951 MB


 Top FLOWS: 83685 ( 23.52%)  
 Top PKTS: 850907 ( 19.91%)  
 Top BYTES: 228.93 MB ( 11.16%)