Top outbound hosts by flows
| Machine: | 129.252.189.32 | 7269 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 13130 ( 3.69%) | | |
| | PKTS: | 120255 ( 2.81%) | | |
| | BYTES: | 15403561 ( 0.72%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 2244 | 22584 | 4367947 |
| | domain (53)/udp | 550 | 582 | 34746 |
| | (1539)/tcp | 7 | 48 | 4257 |
| | (4436)/tcp | 6 | 18 | 1576 |
| | (2374)/tcp | 6 | 33 | 2676 |
| | (4554)/tcp | 6 | 44 | 3739 |
| | (1255)/tcp | 5 | 21 | 2249 |
| | (2505)/tcp | 5 | 30 | 2643 |
| | (2415)/tcp | 5 | 27 | 3667 |
| | (1043)/tcp | 5 | 43 | 5084 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 10158 | 95234 | 9146463 |
| | http (80)/tcp | 174 | 1811 | 1850445 |
| | (33955)/tcp | 5 | 171 | 14046 |
| | (46294)/tcp | 4 | 13 | 631 |
| | 0 0/icmp | 4 | 44 | 3960 |
| | (33855)/tcp | 4 | 27 | 15684 |
| | (54491)/tcp | 4 | 13 | 738 |
| | (60413)/tcp | 4 | 23 | 15507 |
| | (36276)/tcp | 4 | 17 | 1077 |
| | (48582)/tcp | 4 | 24 | 4512 |
| Machine: | 129.252.152.105 | 5221 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 7955 ( 2.24%) | | |
| | PKTS: | 83726 ( 1.96%) | | |
| | BYTES: | 8936171 ( 0.42%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 17 | 1383 | 989703 |
| | (4335)/tcp | 6 | 61 | 5918 |
| | (3631)/tcp | 5 | 85 | 13860 |
| | (4779)/tcp | 5 | 49 | 4246 |
| | (4227)/tcp | 5 | 58 | 4911 |
| | (2695)/tcp | 5 | 37 | 3887 |
| | (2229)/tcp | 5 | 27 | 2400 |
| | (1731)/tcp | 5 | 87 | 8113 |
| | (2170)/tcp | 5 | 43 | 4806 |
| | (54836)/tcp | 5 | 32 | 3015 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 7938 | 82343 | 7946468 |
| | (35586)/tcp | 3 | 3 | 138 |
| | (5799)/tcp | 2 | 7 | 334 |
| | (5800)/tcp | 2 | 7 | 334 |
| | (5822)/tcp | 1 | 16 | 1865 |
| | (5788)/tcp | 1 | 1 | 48 |
| | (5827)/tcp | 1 | 14 | 732 |
| | (5808)/tcp | 1 | 1253 | 977454 |
| | (5819)/tcp | 1 | 20 | 3386 |
| | (5840)/tcp | 1 | 6 | 288 |
| Machine: | 129.252.59.231 | 6029 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 7761 ( 2.18%) | | |
| | PKTS: | 26548 ( 0.62%) | | |
| | BYTES: | 1984702 ( 0.09%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 7760 | 26546 | 1984596 |
| | domain (53)/tcp | 1 | 2 | 106 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 7760 | 26546 | 1984596 |
| | (59165)/tcp | 1 | 2 | 106 |
| Machine: | 129.252.158.13 | 2602 hosts touched | |
| | 2008/05/17 12:43:58 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 6571 ( 1.85%) | | |
| | PKTS: | 82402 ( 1.93%) | | |
| | BYTES: | 5060053 ( 0.24%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (61561)/tcp | 6 | 54 | 2524 |
| | (1942)/tcp | 6 | 52 | 3028 |
| | (1900)/tcp | 6 | 50 | 3120 |
| | (3899)/tcp | 5 | 16 | 925 |
| | (63360)/tcp | 5 | 30 | 1420 |
| | (3784)/tcp | 5 | 36 | 2158 |
| | (52610)/tcp | 5 | 19 | 1243 |
| | (60150)/tcp | 5 | 54 | 2524 |
| | (3189)/tcp | 5 | 45 | 2811 |
| | (2286)/tcp | 5 | 16 | 1076 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 6569 | 82400 | 5059933 |
| | 0 0/icmp | 2 | 2 | 120 |
| Machine: | 129.252.189.11 | 4870 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 6324 ( 1.78%) | | |
| | PKTS: | 23101 ( 0.54%) | | |
| | BYTES: | 1903229 ( 0.09%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 5493 | 22015 | 1666280 |
| | (32768)/udp | 62 | 82 | 19979 |
| | (32769)/udp | 20 | 29 | 6299 |
| | (32771)/udp | 9 | 15 | 2949 |
| | (9253)/udp | 9 | 9 | 1789 |
| | (5353)/udp | 8 | 12 | 2833 |
| | (32776)/udp | 7 | 10 | 2641 |
| | (32770)/udp | 6 | 6 | 1760 |
| | (32772)/udp | 6 | 7 | 2164 |
| | (32780)/udp | 5 | 5 | 904 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (32768)/udp | 5432 | 21934 | 1647107 |
| | domain (53)/udp | 884 | 1159 | 255664 |
| | domain (53)/tcp | 5 | 5 | 230 |
| | ntp (123)/udp | 3 | 3 | 228 |
| Machine: | 129.252.42.25 | 4203 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 5777 ( 1.62%) | | |
| | PKTS: | 38441 ( 0.90%) | | |
| | BYTES: | 3596227 ( 0.17%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 3174 | 34633 | 2785929 |
| | (32768)/udp | 81 | 139 | 28934 |
| | (32769)/udp | 43 | 110 | 24630 |
| | (32771)/udp | 17 | 27 | 6070 |
| | (32770)/udp | 15 | 38 | 8494 |
| | (32772)/udp | 14 | 23 | 4315 |
| | (1059)/udp | 11 | 15 | 3192 |
| | (1024)/udp | 10 | 39 | 6190 |
| | (32773)/udp | 10 | 10 | 1958 |
| | (1056)/udp | 10 | 13 | 2577 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 5747 | 38411 | 3594522 |
| | domain (53)/tcp | 21 | 21 | 966 |
| | ntp (123)/udp | 8 | 8 | 608 |
| | (53217)/udp | 1 | 1 | 131 |
| Machine: | 129.252.191.9 | 3448 hosts touched | |
| | 2008/05/17 12:43:56 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 4986 ( 1.40%) | | |
| | PKTS: | 49182 ( 1.15%) | | |
| | BYTES: | 4592330 ( 0.21%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (3112)/tcp | 6 | 50 | 3966 |
| | (1513)/tcp | 5 | 34 | 3739 |
| | (3174)/tcp | 4 | 43 | 3454 |
| | (61512)/tcp | 4 | 56 | 2576 |
| | (4768)/tcp | 4 | 34 | 2847 |
| | (3115)/tcp | 4 | 18 | 1506 |
| | (61383)/tcp | 4 | 58 | 2668 |
| | (3590)/tcp | 4 | 45 | 3707 |
| | (60888)/tcp | 4 | 60 | 2760 |
| | (2318)/tcp | 4 | 32 | 2650 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 4986 | 49182 | 4592330 |
| Machine: | 129.252.41.11 | 3657 hosts touched | |
| | 2008/05/17 12:43:56 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 4919 ( 1.38%) | | |
| | PKTS: | 20200 ( 0.47%) | | |
| | BYTES: | 1996003 ( 0.09%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 2499 | 16825 | 1310287 |
| | (32768)/udp | 91 | 141 | 31132 |
| | (32769)/udp | 39 | 104 | 24000 |
| | (32772)/udp | 17 | 20 | 5103 |
| | (32770)/udp | 14 | 31 | 7253 |
| | (32773)/udp | 13 | 21 | 5053 |
| | (32771)/udp | 12 | 16 | 3929 |
| | (32780)/udp | 10 | 17 | 3678 |
| | (1040)/udp | 9 | 11 | 2103 |
| | (1024)/udp | 7 | 16 | 3620 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 4894 | 20166 | 1994104 |
| | domain (53)/tcp | 18 | 27 | 1335 |
| | ntp (123)/udp | 6 | 6 | 456 |
| | (34637)/udp | 1 | 1 | 108 |
| Machine: | 129.252.117.202 | 3061 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 4858 ( 1.37%) | | |
| | PKTS: | 50942 ( 1.19%) | | |
| | BYTES: | 4745043 ( 0.22%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 96 | 395 | 29079 |
| | (3427)/tcp | 5 | 29 | 3480 |
| | (3165)/tcp | 5 | 26 | 2689 |
| | (4344)/tcp | 5 | 62 | 5214 |
| | (2966)/tcp | 5 | 52 | 5399 |
| | (3132)/tcp | 5 | 24 | 2063 |
| | (1264)/tcp | 4 | 10 | 898 |
| | (3528)/tcp | 4 | 34 | 2608 |
| | (1821)/tcp | 4 | 25 | 2055 |
| | (10091)/tcp | 4 | 14 | 1311 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 4761 | 50546 | 4715918 |
| | (26218)/tcp | 1 | 1 | 60 |
| | (26244)/tcp | 1 | 19 | 4245 |
| | (26247)/tcp | 1 | 5 | 300 |
| | (26270)/tcp | 1 | 1 | 60 |
| | (26238)/tcp | 1 | 1 | 60 |
| | (26224)/tcp | 1 | 1 | 60 |
| | (26172)/tcp | 1 | 5 | 300 |
| | (26263)/tcp | 1 | 12 | 723 |
| | (26249)/tcp | 1 | 5 | 300 |
| Machine: | 129.252.2.118 | 2828 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:49 |
| |
| | FLOWS: | 4681 ( 1.32%) | | |
| | PKTS: | 8422 ( 0.20%) | | |
| | BYTES: | 1463691 ( 0.07%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 532 | 1945 | 163822 |
| | (32768)/udp | 117 | 174 | 36139 |
| | (5353)/udp | 46 | 275 | 44341 |
| | (32769)/udp | 38 | 99 | 22294 |
| | ntp (123)/udp | 25 | 25 | 1900 |
| | (32772)/udp | 22 | 36 | 9698 |
| | (32771)/udp | 20 | 31 | 7461 |
| | (5302)/udp | 18 | 36 | 7692 |
| | (32777)/udp | 11 | 16 | 3377 |
| | (1055)/udp | 11 | 15 | 2682 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | domain (53)/udp | 4199 | 6509 | 1319110 |
| | (32768)/udp | 410 | 1776 | 127672 |
| | ntp (123)/udp | 32 | 33 | 3348 |
| | domain (53)/tcp | 18 | 25 | 2244 |
| | 0 0/icmp | 11 | 26 | 6045 |
| | (44647)/tcp | 1 | 7 | 477 |
| | (44642)/tcp | 1 | 5 | 1267 |
| | snmp (161)/udp | 1 | 3 | 1059 |
| | smtp (25)/tcp | 1 | 1 | 46 |
| | (44643)/tcp | 1 | 5 | 463 |
| | Top: | 66962 flows | 503219 pkts | 47.3795032501221 MB |
| | All: | 355851 flows | 4273774 pkts | 2051.05620574951 MB |
| | Top FLOWS: | 66962 ( 18.82%) | | |
| | Top PKTS: | 503219 ( 11.77%) | | |
| | Top BYTES: | 47.38 MB ( 2.31%) | | |