Top outbound hosts by packets
| Machine: | 129.252.189.32 | 7269 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 13130 ( 3.69%) | | |
| | PKTS: | 120255 ( 2.81%) | | |
| | BYTES: | 15403561 ( 0.72%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 2244 | 22584 | 4367947 |
| | domain (53)/udp | 550 | 582 | 34746 |
| | (4159)/tcp | 2 | 133 | 16755 |
| | (58787)/tcp | 1 | 105 | 6467 |
| | (58163)/tcp | 3 | 92 | 6245 |
| | (4200)/tcp | 4 | 78 | 6536 |
| | (60209)/tcp | 1 | 76 | 4600 |
| | (2017)/tcp | 2 | 68 | 11987 |
| | (1134)/tcp | 4 | 67 | 5752 |
| | (4532)/tcp | 4 | 62 | 6183 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 10158 | 95234 | 9146463 |
| | http (80)/tcp | 174 | 1811 | 1850445 |
| | (33955)/tcp | 5 | 171 | 14046 |
| | (52253)/tcp | 1 | 85 | 33557 |
| | (35768)/tcp | 1 | 64 | 4302 |
| | (59172)/tcp | 1 | 53 | 3653 |
| | (57054)/tcp | 1 | 51 | 24704 |
| | (49562)/tcp | 1 | 47 | 3101 |
| | (34406)/tcp | 3 | 46 | 8232 |
| | 0 0/icmp | 4 | 44 | 3960 |
| Machine: | 129.252.152.105 | 5221 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 7955 ( 2.24%) | | |
| | PKTS: | 83726 ( 1.96%) | | |
| | BYTES: | 8936171 ( 0.42%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 17 | 1383 | 989703 |
| | (2629)/tcp | 5 | 230 | 14950 |
| | (1077)/tcp | 3 | 158 | 36472 |
| | (39895)/tcp | 4 | 158 | 7604 |
| | (2930)/tcp | 2 | 157 | 12835 |
| | (2821)/tcp | 2 | 99 | 24190 |
| | (1731)/tcp | 5 | 87 | 8113 |
| | (3631)/tcp | 5 | 85 | 13860 |
| | (53291)/tcp | 2 | 82 | 5382 |
| | (1786)/tcp | 2 | 78 | 12368 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 7938 | 82343 | 7946468 |
| | (5808)/tcp | 1 | 1253 | 977454 |
| | (5832)/tcp | 1 | 23 | 3417 |
| | (5819)/tcp | 1 | 20 | 3386 |
| | (5822)/tcp | 1 | 16 | 1865 |
| | (5844)/tcp | 1 | 16 | 821 |
| | (5821)/tcp | 1 | 16 | 838 |
| | (5827)/tcp | 1 | 14 | 732 |
| | (5799)/tcp | 2 | 7 | 334 |
| | (5800)/tcp | 2 | 7 | 334 |
| Machine: | 129.252.158.13 | 2602 hosts touched | |
| | 2008/05/17 12:43:58 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 6571 ( 1.85%) | | |
| | PKTS: | 82402 ( 1.93%) | | |
| | BYTES: | 5060053 ( 0.24%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (20846)/tcp | 1 | 2234 | 103176 |
| | (11558)/tcp | 1 | 585 | 30680 |
| | (60431)/tcp | 2 | 482 | 31154 |
| | (53744)/tcp | 4 | 120 | 5735 |
| | (56346)/tcp | 2 | 108 | 5168 |
| | (51945)/tcp | 1 | 106 | 5076 |
| | (54555)/tcp | 3 | 105 | 5097 |
| | (50330)/tcp | 1 | 98 | 4708 |
| | (58130)/tcp | 2 | 96 | 4816 |
| | (50844)/tcp | 1 | 90 | 5194 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 6569 | 82400 | 5059933 |
| | 0 0/icmp | 2 | 2 | 120 |
| Machine: | 129.252.158.17 | 348 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 2736 ( 0.77%) | | |
| | PKTS: | 71539 ( 1.67%) | | |
| | BYTES: | 27160631 ( 1.26%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (25252)/tcp | 4 | 19206 | 5303548 |
| | (25251)/tcp | 4 | 17717 | 814982 |
| | (3707)/tcp | 2 | 514 | 344658 |
| | (3833)/tcp | 2 | 413 | 424437 |
| | (2259)/tcp | 4 | 361 | 371919 |
| | (61196)/tcp | 2 | 331 | 247770 |
| | (3708)/tcp | 2 | 330 | 211379 |
| | (2669)/tcp | 2 | 321 | 434009 |
| | (3704)/tcp | 1 | 312 | 237507 |
| | (4277)/tcp | 2 | 288 | 243274 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | https (443)/tcp | 2645 | 71283 | 27137281 |
| | http (80)/tcp | 91 | 256 | 23350 |
| Machine: | 129.252.22.72 | 1023 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:47 |
| |
| | FLOWS: | 1145 ( 0.32%) | | |
| | PKTS: | 54188 ( 1.27%) | | |
| | BYTES: | 67830506 ( 3.15%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (13306)/tcp | 4 | 23040 | 34048216 |
| | (55429)/tcp | 4 | 12912 | 15698885 |
| | (61664)/tcp | 4 | 5794 | 6293575 |
| | (49308)/tcp | 4 | 3684 | 4415915 |
| | (30625)/tcp | 4 | 2471 | 3208761 |
| | (27748)/tcp | 4 | 1592 | 1522837 |
| | (30281)/tcp | 4 | 1191 | 700353 |
| | (18881)/tcp | 4 | 825 | 921298 |
| | ftp (21)/tcp | 4 | 259 | 16988 |
| | (40735)/tcp | 3 | 165 | 145024 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (4004)/tcp | 4 | 23040 | 34048216 |
| | (4730)/tcp | 4 | 12912 | 15698885 |
| | (4584)/tcp | 4 | 5794 | 6293575 |
| | servicemeter (2603)/tcp | 4 | 3684 | 4415915 |
| | (2627)/tcp | 4 | 2471 | 3208761 |
| | (2202)/tcp | 4 | 1592 | 1522837 |
| | (3656)/tcp | 4 | 1191 | 700353 |
| | venus-se (2431)/tcp | 4 | 825 | 921298 |
| | (60047)/udp | 552 | 578 | 75285 |
| | (51505)/udp | 428 | 448 | 59172 |
| Machine: | 129.252.117.202 | 3061 hosts touched | |
| | 2008/05/17 12:43:55 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 4858 ( 1.37%) | | |
| | PKTS: | 50942 ( 1.19%) | | |
| | BYTES: | 4745043 ( 0.22%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 96 | 395 | 29079 |
| | (37134)/tcp | 2 | 115 | 9868 |
| | (1665)/tcp | 3 | 109 | 8853 |
| | (1545)/tcp | 2 | 107 | 9101 |
| | (46094)/tcp | 1 | 97 | 8062 |
| | (2209)/tcp | 1 | 78 | 13771 |
| | (4139)/tcp | 1 | 78 | 13273 |
| | (3088)/tcp | 4 | 74 | 5461 |
| | (4953)/tcp | 2 | 70 | 5262 |
| | (2965)/tcp | 3 | 69 | 6423 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 4761 | 50546 | 4715918 |
| | (26244)/tcp | 1 | 19 | 4245 |
| | (26243)/tcp | 1 | 16 | 4065 |
| | (26285)/tcp | 1 | 14 | 838 |
| | (26209)/tcp | 1 | 14 | 812 |
| | (26254)/tcp | 1 | 14 | 816 |
| | (26263)/tcp | 1 | 12 | 723 |
| | (26252)/tcp | 1 | 12 | 633 |
| | (26246)/tcp | 1 | 12 | 633 |
| | (26258)/tcp | 1 | 12 | 633 |
| Machine: | 129.252.191.9 | 3448 hosts touched | |
| | 2008/05/17 12:43:56 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 4986 ( 1.40%) | | |
| | PKTS: | 49182 ( 1.15%) | | |
| | BYTES: | 4592330 ( 0.21%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (62387)/tcp | 1 | 126 | 10781 |
| | (4679)/tcp | 1 | 84 | 9579 |
| | (55038)/tcp | 1 | 82 | 4923 |
| | (56679)/tcp | 1 | 77 | 5966 |
| | (60888)/tcp | 4 | 60 | 2760 |
| | (61383)/tcp | 4 | 58 | 2668 |
| | (61315)/tcp | 4 | 58 | 2668 |
| | (61512)/tcp | 4 | 56 | 2576 |
| | (60197)/tcp | 4 | 56 | 2576 |
| | (27789)/tcp | 1 | 55 | 3441 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | smtp (25)/tcp | 4986 | 49182 | 4592330 |
| Machine: | 129.252.158.62 | 189 hosts touched | |
| | 2008/05/17 12:44:11 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 2943 ( 0.83%) | | |
| | PKTS: | 43792 ( 1.02%) | | |
| | BYTES: | 46749814 ( 2.17%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (3853)/tcp | 4 | 16540 | 24795091 |
| | (3863)/tcp | 1 | 1331 | 1992530 |
| | (2860)/tcp | 1 | 753 | 1118084 |
| | (2982)/tcp | 1 | 676 | 873850 |
| | (2846)/tcp | 1 | 608 | 907257 |
| | (3864)/tcp | 2 | 599 | 884695 |
| | (51568)/tcp | 1 | 582 | 869234 |
| | (2848)/tcp | 1 | 565 | 839939 |
| | (2842)/tcp | 1 | 545 | 809007 |
| | (2857)/tcp | 1 | 502 | 742047 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | http (80)/tcp | 2918 | 43687 | 46736940 |
| | (38962)/tcp | 1 | 7 | 2081 |
| | (38859)/tcp | 1 | 7 | 2083 |
| | (38836)/tcp | 1 | 7 | 2080 |
| | (38994)/tcp | 1 | 6 | 459 |
| | (38986)/tcp | 1 | 6 | 458 |
| | (38928)/tcp | 1 | 6 | 459 |
| | (38982)/tcp | 1 | 6 | 458 |
| | (38983)/tcp | 1 | 6 | 460 |
| | (38858)/tcp | 1 | 6 | 2032 |
| Machine: | 129.252.231.159 | 111 hosts touched | |
| | 2008/05/17 12:43:56 -> | 2008/05/17 12:49:54 |
| |
| | FLOWS: | 234 ( 0.07%) | | |
| | PKTS: | 43049 ( 1.01%) | | |
| | BYTES: | 50777904 ( 2.36%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (6883)/tcp | 4 | 21851 | 28311706 |
| | (56967)/tcp | 4 | 6538 | 8108689 |
| | (28156)/tcp | 5 | 2081 | 937905 |
| | (59828)/tcp | 5 | 1496 | 1931785 |
| | (55398)/tcp | 6 | 1481 | 1913038 |
| | (11225)/tcp | 4 | 1399 | 2007128 |
| | (62580)/tcp | 4 | 1388 | 1799721 |
| | (24088)/tcp | 5 | 954 | 634442 |
| | (16902)/tcp | 4 | 779 | 532142 |
| | (60131)/tcp | 4 | 745 | 820180 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (4348)/tcp | 4 | 21851 | 28311706 |
| | (1306)/tcp | 4 | 6538 | 8108689 |
| | (3463)/tcp | 4 | 2079 | 937809 |
| | (4498)/tcp | 5 | 1496 | 1931785 |
| | (4567)/tcp | 4 | 1477 | 1912846 |
| | (3522)/tcp | 4 | 1399 | 2007128 |
| | (4044)/tcp | 4 | 1388 | 1799721 |
| | (1326)/tcp | 5 | 954 | 634442 |
| | (3999)/tcp | 4 | 779 | 532142 |
| | (2889)/tcp | 4 | 745 | 820180 |
| Machine: | 129.252.70.40 | 428 hosts touched | |
| | 2008/05/17 12:43:58 -> | 2008/05/17 12:49:55 |
| |
| | FLOWS: | 1098 ( 0.31%) | | |
| | PKTS: | 39153 ( 0.92%) | | |
| | BYTES: | 9908397 ( 0.46%) | | |
| All Destination Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | http (80)/tcp | 521 | 24197 | 2976534 |
| | (0)/udp | 23 | 3155 | 592395 |
| | (15000)/udp | 29 | 915 | 278357 |
| | https (443)/tcp | 54 | 791 | 152445 |
| | (22969)/udp | 1 | 597 | 688677 |
| | (17178)/udp | 1 | 555 | 525540 |
| | (25714)/udp | 1 | 419 | 507143 |
| | (24816)/udp | 1 | 322 | 359352 |
| | domain (53)/udp | 147 | 286 | 18144 |
| | (28190)/udp | 1 | 285 | 331453 |
| All Source Ports: | | | | |
| | PORT/PROTO | FLOWS | PKTS | BYTES |
| | (32050)/tcp | 2 | 11496 | 529589 |
| | (0)/udp | 23 | 3155 | 592395 |
| | (32740)/tcp | 1 | 2328 | 107541 |
| | (32619)/tcp | 1 | 773 | 35935 |
| | (37433)/udp | 1 | 597 | 688677 |
| | (37295)/udp | 1 | 555 | 525540 |
| | (31969)/tcp | 3 | 512 | 74171 |
| | (37523)/udp | 1 | 419 | 507143 |
| | (32089)/tcp | 2 | 417 | 54961 |
| | (31970)/tcp | 3 | 409 | 70644 |
| | Top: | 45656 flows | 638228 pkts | 229.992303848267 MB |
| | All: | 355851 flows | 4273774 pkts | 2051.05620574951 MB |
| | Top FLOWS: | 45656 ( 12.83%) | | |
| | Top PKTS: | 638228 ( 14.93%) | | |
| | Top BYTES: | 229.99 MB ( 11.21%) | | |