At 09:32 PM 16-07-04 -0400, Jared Mauch wrote:
For June 2004 (AS378 - Israel): top 10 sending ports:
Rank Port Bytes in Gigabytes Packets 1 http (80/tcp) 1561 GB 1620273534 2 edonkey (4662/tcp) 162 GB 459762654 3 0/icmp 120 GB 851624490 4 ssh (22/tcp) 89 GB 104515538 5 ftpdata (20/tcp) 78 GB 68494269 6 rtsp (554/tcp) 70 GB 54885058 7 https (443/tcp) 66 GB 138954839 8 0/unknown 56 GB 55661555 9 gnutella-svc (6346/tcp) 50 GB 145165558 10 domain (53/udp) 49 GB 371635845
top 10 receiving ports Rank Port Bytes in Gigabytes Packets 1 smtp (25/tcp) 344 GB 759247104 2 edonkey (4662/tcp) 186 GB 442992500 3 5662/tcp 154 GB 252829581 4 1026/udp 125 GB 205236837 5 1027/udp 119 GB 197314910 6 microsoftds (445/tcp) 91 GB 1721773411 7 netbiosns (137/udp) 88 GB 1209221595 8 http (80/tcp) 87 GB 1073140502 9 2048/icmp 62 GB 974609659 10 6970/udp 57 GB 103562134
We have hourly, daily, weekly and monthly stats.
-Hank
this is from a 10-15 min sample period, based on flow count, not bytecount.
TOP TEN:
(tcp) 80, 25, 6699, 4662, 1433 443, 445, 6881, 7171, 6346
(udp) 53, 6257, 27960, 1026, 135 27015, 22321, 1027, 3310, 28960
- jared
-- Jared Mauch | pgp key available via finger from [EMAIL PROTECTED] clue++; | http://puck.nether.net/~jared/ My statements are only mine.
