Top inbound hosts by packets
| Machine: | 129.252.189.32 | 8872 hosts touched | |
| | 2008/05/17 12:43:59 -> | 2008/05/17 12:49:57 |
| |
| | FLOWS: | 15606 ( 4.39%) | | |
| | PKTS: | 166431 ( 3.89%) | | |
| | BYTES: | 19909882 ( 0.93%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 12444 | 128577 | 16792130 |
| | http (80)/tcp | 233 | 7878 | 657681 |
| | auth (113)/tcp | 163 | 339 | 19576 |
| | (33955)/tcp | 7 | 202 | 11451 |
| | (35768)/tcp | 1 | 93 | 6659 |
| | (52253)/tcp | 1 | 66 | 3847 |
| | (52548)/tcp | 2 | 56 | 3285 |
| | (59172)/tcp | 1 | 51 | 3368 |
| | (34406)/tcp | 5 | 48 | 2953 |
| | (49562)/tcp | 2 | 46 | 3726 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 2707 | 29534 | 2433456 |
| | (49248)/tcp | 3 | 2974 | 236454 |
| | (62953)/tcp | 2 | 2214 | 173524 |
| | (4159)/tcp | 2 | 238 | 12561 |
| | (58787)/tcp | 1 | 177 | 81345 |
| | (63991)/tcp | 1 | 163 | 13147 |
| | (56698)/tcp | 1 | 155 | 70839 |
| | (58163)/tcp | 4 | 137 | 63094 |
| | (60209)/tcp | 1 | 105 | 46929 |
| | (53234)/tcp | 2 | 104 | 38041 |
| Machine: | 129.252.37.32 | 69 hosts touched | |
| | 2008/05/17 12:44:03 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 473 ( 0.13%) | | |
| | PKTS: | 110225 ( 2.58%) | | |
| | BYTES: | 5256985 ( 0.24%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | http (80)/tcp | 470 | 110218 | 5256209 |
| | smtp (25)/tcp | 1 | 5 | 296 |
| | ntp (123)/udp | 1 | 1 | 76 |
| | ms-sql-m (1434)/udp | 1 | 1 | 404 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (1148)/tcp | 5 | 16940 | 779246 |
| | (1124)/tcp | 4 | 14127 | 649842 |
| | (1163)/tcp | 3 | 13515 | 622251 |
| | (1166)/tcp | 2 | 8459 | 389659 |
| | (1151)/tcp | 3 | 7611 | 350668 |
| | (1142)/tcp | 3 | 7441 | 342286 |
| | (1157)/tcp | 2 | 6944 | 319978 |
| | (1133)/tcp | 2 | 6034 | 277564 |
| | (1107)/tcp | 2 | 5416 | 249136 |
| | (1250)/tcp | 2 | 4760 | 219513 |
| Machine: | 129.252.152.105 | 6328 hosts touched | |
| | 2008/05/17 12:43:57 -> | 2008/05/17 12:49:57 |
| |
| | FLOWS: | 9874 ( 2.77%) | | |
| | PKTS: | 108606 ( 2.54%) | | |
| | BYTES: | 15294619 ( 0.71%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 9850 | 108217 | 15274521 |
| | (5808)/tcp | 1 | 216 | 8952 |
| | (5737)/tcp | 2 | 28 | 1288 |
| | (5812)/tcp | 1 | 20 | 1124 |
| | (5832)/tcp | 1 | 16 | 949 |
| | (5845)/tcp | 1 | 16 | 1206 |
| | (5838)/tcp | 1 | 13 | 867 |
| | (5819)/tcp | 1 | 11 | 1050 |
| | (5821)/tcp | 1 | 11 | 733 |
| | (5844)/tcp | 1 | 11 | 637 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 14 | 363 | 18536 |
| | (2629)/tcp | 5 | 309 | 172776 |
| | (2930)/tcp | 2 | 263 | 21509 |
| | (1077)/tcp | 3 | 199 | 17781 |
| | (39895)/tcp | 5 | 177 | 251340 |
| | (2653)/tcp | 3 | 173 | 16232 |
| | (2821)/tcp | 2 | 137 | 56951 |
| | (4088)/tcp | 1 | 122 | 45482 |
| | (57835)/tcp | 1 | 122 | 62876 |
| | (56691)/tcp | 1 | 121 | 62378 |
| Machine: | 129.252.158.13 | 2075 hosts touched | |
| | 2008/05/17 12:44:01 -> | 2008/05/17 12:49:58 |
| |
| | FLOWS: | 5472 ( 1.54%) | | |
| | PKTS: | 93312 ( 2.18%) | | |
| | BYTES: | 17134195 ( 0.80%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 5461 | 93284 | 17132465 |
| | 5 1/icmp | 1 | 16 | 896 |
| | 3 1/icmp | 4 | 4 | 356 |
| | 11 0/icmp | 1 | 3 | 168 |
| | 8 0/icmp | 2 | 2 | 120 |
| | (49153)/udp | 1 | 1 | 78 |
| | 3 3/icmp | 1 | 1 | 56 |
| | 3 13/icmp | 1 | 1 | 56 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (11558)/tcp | 2 | 1158 | 1556582 |
| | (60431)/tcp | 2 | 465 | 113509 |
| | (58130)/tcp | 2 | 181 | 84645 |
| | (1706)/tcp | 1 | 163 | 118885 |
| | (54555)/tcp | 3 | 161 | 82972 |
| | (58383)/tcp | 1 | 160 | 82323 |
| | (50330)/tcp | 1 | 160 | 82479 |
| | (51523)/tcp | 2 | 159 | 81824 |
| | (51945)/tcp | 1 | 159 | 81968 |
| | (53744)/tcp | 6 | 159 | 81863 |
| Machine: | 129.252.41.133 | 813 hosts touched | |
| | 2008/05/17 12:43:58 -> | 2008/05/17 12:49:43 |
| |
| | FLOWS: | 36872 ( 10.36%) | | |
| | PKTS: | 73282 ( 1.71%) | | |
| | BYTES: | 7170288 ( 0.33%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (8906)/udp | 36872 | 73282 | 7170288 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (1112)/udp | 17 | 33 | 3080 |
| | (2496)/udp | 17 | 33 | 3028 |
| | (1177)/udp | 16 | 32 | 3104 |
| | (3611)/udp | 16 | 32 | 3020 |
| | (2498)/udp | 16 | 32 | 3058 |
| | (1098)/udp | 16 | 31 | 2790 |
| | (2502)/udp | 15 | 30 | 2818 |
| | (1161)/udp | 15 | 30 | 2856 |
| | (2490)/udp | 15 | 30 | 2846 |
| | (4257)/udp | 15 | 30 | 2818 |
| Machine: | 129.252.68.14 | 163 hosts touched | |
| | 2008/05/17 12:43:57 -> | 2008/05/17 12:49:58 |
| |
| | FLOWS: | 882 ( 0.25%) | | |
| | PKTS: | 66923 ( 1.57%) | | |
| | BYTES: | 62442075 ( 2.90%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (3851)/udp | 313 | 52798 | 54304063 |
| | (1849)/tcp | 5 | 5836 | 5391603 |
| | (1085)/udp | 72 | 2394 | 136369 |
| | (1680)/tcp | 2 | 856 | 882294 |
| | (3761)/tcp | 5 | 437 | 403741 |
| | (3646)/tcp | 5 | 433 | 236847 |
| | (1954)/tcp | 5 | 385 | 356077 |
| | (3972)/tcp | 5 | 357 | 211748 |
| | (1460)/udp | 32 | 355 | 20141 |
| | (3463)/tcp | 5 | 347 | 15183 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (11674)/udp | 5 | 13352 | 17169695 |
| | (7981)/udp | 5 | 9433 | 12297004 |
| | (13317)/udp | 8 | 9166 | 11428676 |
| | (41676)/tcp | 5 | 5836 | 5391603 |
| | (14353)/udp | 5 | 4273 | 4527620 |
| | (35145)/udp | 5 | 2987 | 2694527 |
| | (11752)/udp | 1 | 1458 | 1948299 |
| | (26994)/tcp | 7 | 1293 | 1286035 |
| | http (80)/tcp | 64 | 1273 | 690198 |
| | (11025)/udp | 5 | 1130 | 352395 |
| Machine: | 129.252.117.202 | 3577 hosts touched | |
| | 2008/05/17 12:43:56 -> | 2008/05/17 12:49:56 |
| |
| | FLOWS: | 5882 ( 1.65%) | | |
| | PKTS: | 62579 ( 1.46%) | | |
| | BYTES: | 7480254 ( 0.35%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 5774 | 62252 | 7459003 |
| | (26244)/tcp | 1 | 15 | 1079 |
| | (26285)/tcp | 1 | 14 | 884 |
| | (26263)/tcp | 2 | 11 | 863 |
| | (26252)/tcp | 2 | 11 | 723 |
| | (26273)/tcp | 1 | 11 | 904 |
| | (26246)/tcp | 2 | 11 | 723 |
| | (26271)/tcp | 1 | 11 | 901 |
| | (26258)/tcp | 2 | 11 | 723 |
| | (26279)/tcp | 2 | 11 | 857 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 98 | 303 | 19944 |
| | (50794)/tcp | 1 | 199 | 11185 |
| | (1665)/tcp | 4 | 165 | 12458 |
| | (1545)/tcp | 2 | 164 | 15640 |
| | (37134)/tcp | 2 | 149 | 43081 |
| | (46094)/tcp | 2 | 119 | 32905 |
| | (51545)/tcp | 1 | 113 | 9586 |
| | (2321)/tcp | 2 | 104 | 10132 |
| | (4874)/tcp | 1 | 100 | 17093 |
| | (2209)/tcp | 1 | 98 | 40977 |
| Machine: | 129.252.191.9 | 4054 hosts touched | |
| | 2008/05/17 12:43:59 -> | 2008/05/17 12:49:56 |
| |
| | FLOWS: | 6030 ( 1.69%) | | |
| | PKTS: | 62437 ( 1.46%) | | |
| | BYTES: | 7845532 ( 0.36%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 6019 | 62425 | 7844838 |
| | 3 3/icmp | 7 | 7 | 392 |
| | 3 13/icmp | 2 | 2 | 112 |
| | 3 1/icmp | 1 | 2 | 112 |
| | netbios-ns (137)/udp | 1 | 1 | 78 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (62387)/tcp | 1 | 158 | 9777 |
| | (50792)/tcp | 3 | 120 | 52059 |
| | (55038)/tcp | 1 | 106 | 46816 |
| | (2871)/tcp | 2 | 100 | 10210 |
| | (4679)/tcp | 2 | 96 | 5722 |
| | (3482)/tcp | 3 | 89 | 4716 |
| | (4760)/tcp | 2 | 87 | 4670 |
| | (56679)/tcp | 1 | 86 | 21784 |
| | (27789)/tcp | 1 | 84 | 35942 |
| | (58784)/tcp | 1 | 80 | 34749 |
| Machine: | 129.252.209.77 | 175 hosts touched | |
| | 2008/05/17 12:43:58 -> | 2008/05/17 12:49:59 |
| |
| | FLOWS: | 856 ( 0.24%) | | |
| | PKTS: | 56291 ( 1.32%) | | |
| | BYTES: | 47040448 ( 2.19%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (3851)/udp | 296 | 50611 | 46441852 |
| | (1085)/udp | 76 | 2576 | 146832 |
| | http (80)/tcp | 241 | 673 | 34247 |
| | (1460)/udp | 24 | 259 | 14779 |
| | 3 3/icmp | 10 | 235 | 19010 |
| | (4579)/tcp | 5 | 163 | 7537 |
| | (4618)/tcp | 3 | 128 | 71114 |
| | (1555)/tcp | 4 | 103 | 47780 |
| | (3757)/tcp | 5 | 98 | 3936 |
| | (4408)/udp | 14 | 96 | 5472 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (24341)/udp | 7 | 12752 | 10658627 |
| | (35385)/udp | 5 | 12301 | 16104446 |
| | (15000)/udp | 68 | 2558 | 1387523 |
| | (33735)/udp | 5 | 2327 | 3119182 |
| | (35152)/udp | 5 | 2215 | 1699206 |
| | (44545)/udp | 4 | 1967 | 2359320 |
| | (16447)/udp | 5 | 1914 | 2618216 |
| | (8000)/udp | 45 | 1664 | 1566839 |
| | (15682)/udp | 5 | 1147 | 696253 |
| | (9901)/udp | 5 | 1088 | 1383869 |
| Machine: | 129.252.70.40 | 704 hosts touched | |
| | 2008/05/17 12:43:56 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 1738 ( 0.49%) | | |
| | PKTS: | 50821 ( 1.19%) | | |
| | BYTES: | 50473700 ( 2.35%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (32050)/tcp | 2 | 18060 | 23472217 |
| | (32740)/tcp | 1 | 3666 | 4760776 |
| | (32619)/tcp | 1 | 1238 | 1605891 |
| | (31969)/tcp | 3 | 699 | 871170 |
| | (31588)/tcp | 3 | 585 | 722694 |
| | (32089)/tcp | 3 | 552 | 659592 |
| | (31970)/tcp | 3 | 516 | 619238 |
| | (37295)/udp | 1 | 489 | 134598 |
| | (32522)/tcp | 1 | 475 | 612470 |
| | (32174)/tcp | 1 | 418 | 527010 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | http (80)/tcp | 967 | 42492 | 48210303 |
| | https (443)/tcp | 68 | 885 | 704386 |
| | (17178)/udp | 1 | 489 | 134598 |
| | (20116)/udp | 2 | 469 | 38224 |
| | (22969)/udp | 3 | 388 | 29283 |
| | (13779)/udp | 3 | 370 | 167613 |
| | (39354)/udp | 1 | 357 | 313994 |
| | (15000)/udp | 22 | 300 | 26083 |
| | (12152)/udp | 1 | 209 | 250151 |
| | (25377)/udp | 1 | 198 | 73300 |
| | Top: | 83685 flows | 850907 pkts | 228.927591323853 MB |
| | All: | 355851 flows | 4273774 pkts | 2051.05620574951 MB |
| | Top FLOWS: | 83685 ( 23.52%) | | |
| | Top PKTS: | 850907 ( 19.91%) | | |
| | Top BYTES: | 228.93 MB ( 11.16%) | | |