(C) 1998-2010 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about 10.0.1.6

IP Address10.0.1.6 [unicast - multihomed Multihomed] [ Purge Asset ]
Multihomed Addresses 
    Custom Host Name
    First/Last SeenFri Sep 13 16:14:37 2024  -  Fri Sep 20 08:25:59 2024 [Inactive since 0 sec]
    Subnet10.0.0.0/22
    Main Host MAC Address9C:9D:7E:5F:50:BE 
    Host LocationLocal (inside specified/local subnet or known network list)
    IP TTL (Time to Live)1:127 [~0 hop(s)]
    Total Data Sent7.1 GBytes/62,971,641 Pkts/0 Retran. Pkts [0%]
    Broadcast Pkts Sent163,967 Pkts
    Multicast TrafficSent 1.2 KBytes/11 Pkts 
    Data Sent Stats
    Local 4.4 %
      
    		Rem 95.6 %
    IP vs. Non-IP Sent
    IP 95.6 %
      
    		Non-IP 4.4 %
    Total Data Rcvd130.0 GBytes/103,891,736 Pkts/0 Retran. Pkts [0%]
    Data Rcvd Stats
    Local 2.7 %
      
    		Rem 97.3 %
    IP vs. Non-IP Rcvd
    IP 97.3 %
      
    		Non-IP 2.7 %
    Sent vs. Rcvd Pkts
    Sent 37.7 %
      
    		Rcvd 62.3 %
    Sent vs. Rcvd Data
    Sent 5.2 %
      
    		Rcvd 94.8 %
    Used Subnet Routers Jetway Information Co., Ltd.:AB:14:78 Network Card
    LAA (Locally assigned address):35:F2:31 Network Card
    LAA (Locally assigned address):24:7C:21 Network Card
    Host TypeName Server DNS
    Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
    1. High RiskDuplicated MAC found for this IP address (spoofing?)
    2. Medium RiskWrong network mask or bridging enabled
    3. Medium RiskSuspicious activities: too many host contacts
    4. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
      [Rcvd: rejected] [Sent: udp to closed] [Rcvd: port unreac] [Rcvd: hostnet unreac] [Rcvd: admin prohib] 

     

    Host Traffic Stats

    TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
    8 AM 28.6 MBytes2.8 %516.9 MBytes3.1 %
    7 AM 77.3 MBytes7.5 %1.3 GBytes8.0 %
    6 AM 56.0 MBytes5.4 %1.2 GBytes7.2 %
    5 AM 2.2 MBytes0.2 %5.7 MBytes0.0 %
    4 AM 1.4 MBytes0.1 %3.6 MBytes0.0 %
    3 AM 30.6 MBytes3.0 %29.4 MBytes0.2 %
    2 AM 6.8 MBytes0.7 %9.8 MBytes0.1 %
    1 AM 151.4 KBytes0.0 %159.6 KBytes0.0 %
    12 AM 2.1 MBytes0.2 %6.6 MBytes0.0 %
    11 PM 7.8 MBytes0.8 %326.1 MBytes2.0 %
    10 PM 153.4 MBytes14.9 %768.5 MBytes4.6 %
    9 PM 40.7 MBytes3.9 %666.1 MBytes4.0 %
    8 PM 37.9 MBytes3.7 %1022.9 MBytes6.1 %
    7 PM 42.5 MBytes4.1 %552.3 MBytes3.3 %
    6 PM 3.9 MBytes0.4 %9.6 MBytes0.1 %
    5 PM 31.2 MBytes3.0 %759.5 MBytes4.6 %
    4 PM 42.8 MBytes4.1 %909.8 MBytes5.5 %
    3 PM 22.0 MBytes2.1 %351.1 MBytes2.1 %
    2 PM 46.1 MBytes4.5 %1.2 GBytes7.3 %
    1 PM 43.6 MBytes4.2 %1.0 GBytes6.3 %
    12 PM 176.7 MBytes17.1 %1.7 GBytes10.7 %
    11 AM 62.6 MBytes6.1 %1.8 GBytes11.3 %
    10 AM 48.5 MBytes4.7 %1.2 GBytes7.3 %
    9 AM 67.9 MBytes6.6 %1.0 GBytes6.4 %
    Total

     

    Packet Statistics

    TCP ConnectionsDirected toRcvd From
    Rejected44 119

    AnomalyPkts Sent toPkts Rcvd from
    UDP Pkt to Closed Port3,533 18,282
    ICMP Port Unreachable18,326 3,652
    ICMP Net Unreachable710,583 11
    ICMP Administratively Prohibited0  10

    ARPPacket
    Request Sent0
    Reply Rcvd15,024 (0.0 %)
    Reply Sent14,470

     

    Protocol Distribution

    ProtocolData SentData Rcvd
    TCP3.8 GBytes
    55%

     

    		 70.5 GBytes
    55%

     

    UDP2.9 GBytes
    42%

     

    		 56.1 GBytes
    44%

     

    ICMP113.7 MBytes
    1%

     

    		 1.4 MBytes 
    ICMPv60.1 KBytes  0.0 KBytes 
    IPv61.2 KBytes  0.0 KBytes 
    IPsec0.0 KBytes  15.2 KBytes 
    (R)ARP8.5 MBytes  806.7 KBytes 
    Other (Non IP)1.2 KBytes  0.0 KBytes 
    Protocol Distribution
    IP Distribution

     

    Unknown Protocols

    Data SentData Rcvd
  1. IP Protocol: 0x0
  2. IP Protocol: 0x0
  3. IP Protocol: 0x0
  4. IP Protocol: 0x0
  5. IP Protocol: 0x0  
    		6.  

     

    ICMP Traffic

    TypePkt SentPkt Rcvd
    Echo Request8,3490
    Echo Reply07,974
    Unreach728,9093,673
    Time Exceeded13,003

     

    IP Fragments Distribution

    ProtocolData SentData Rcvd
    UDP0.0 KBytes  164.4 KBytes100
    Fragment Distribution Received Fragment Distribution for 10.0.1.6-65535
    IP Fragment Distribution Received IP Fragment Distribution for 10.0.1.6-65535

     

    Last Contacted Peers

    Sent ToIP Address
    142.251.10.95 142.251.10.95 
    57.144.100.8 57.144.100.8 
    172.67.176.181 172.67.176.181 
    34.96.106.127 34.96.106.127 
    157.240.208.34 157.240.208.34 
    57.144.100.9 57.144.100.9 
    64.233.170.94 64.233.170.94 
    157.240.7.32 157.240.7.32 
    Total Contacts1309995
    Received FromIP Address
    106.15.227.222 106.15.227.222 
    34.96.106.127 34.96.106.127 
    157.240.7.32 157.240.7.32 
    57.144.100.9 57.144.100.9 
    142.250.4.101 142.250.4.101 
    64.233.170.94 64.233.170.94 
    74.125.200.188 74.125.200.188 
    31.13.95.60 31.13.95.60 
    Total Contacts1457878

     

    TCP/UDP Service/Port Usage

    IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
    daytime133/153132.163.97.6   
    telnet2339/17.7 KBytes172.232.225.175   
    domain5342/3.5 KBytesJetway Information Co., Ltd.:AB:14:78 Network Card 2/198192.168.63.36
    http8025005/202.7 MBytes31.13.95.61   
    ntp1235061/237.2 KBytes216.239.35.8 22/1.0 KBytes52.148.114.188
    sgmp-traps160264/95.5 KBytes169.136.92.11   
    bgp1791/85172.232.239.130   
    2992991988/209.0 KBytes8.215.162.27   
    300300583/66.8 KBytes169.136.92.53   
    301301338/49.9 KBytes169.136.94.60   
    3023021366/221.1 KBytes8.215.162.27   
    3033031125/134.2 KBytes8.215.162.12   
    3073076/72543.157.253.102   
    novastorbakcup30858/4.5 KBytes43.157.253.179   
    https4439367/126.8 GBytes31.13.95.60   
    isakmp50097/44.7 KBytes115.178.173.4   
    rtsp55437/37.7 KBytes172.232.251.41   
    sanity6432/1538.215.162.11   
    pssc64537/15.1 KBytes8.215.162.11   
    dhcp-failover6476/4598.215.162.11   
    rrp648180/245.4 KBytes8.215.162.11   
    cadview-3d64919/15.0 KBytes8.215.162.11   
    85385323878/5.6 MBytes94.140.14.14   
    imaps993568/230.8 KBytes142.251.12.108   

     

    TCP/UDP - Traffic on Other Ports

    Client PortServer Port

     

    TCP/UDP Recently Used Ports

    Client PortServer Port