(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about mail.google.com

IP Address142.251.129.133 Flag for gTLD code com (Guessing from gTLD) [unicast] [ Purge Asset ]
First/Last SeenMon Jul 14 04:27:33 2025  -  Wed Jul 16 10:53:28 2025 [Inactive since 1 sec]
Domaingoogle.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
OS NameOS: Cisco [Cisco-louche1 ] 
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)122:122 [~6 hop(s)]
Total Data Sent927.9 MBytes/1,067,342 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd345.4 MBytes/771,621 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 58.0 %
  
Rcvd 42.0 %
Sent vs. Rcvd Data
Sent 72.9 %
  
Rcvd 27.1 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Medium RiskSuspicious activities: too many host contacts
  2. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
10 AM 27.9 MBytes10.0 %10.3 MBytes7.3 %
9 AM 14.7 MBytes5.2 %38.7 MBytes27.3 %
8 AM 25.3 MBytes9.0 %12.0 MBytes8.5 %
7 AM 22.4 MBytes8.0 %10.3 MBytes7.3 %
6 AM 33.4 MBytes11.9 %14.6 MBytes10.3 %
5 AM 73.9 MBytes26.4 %26.7 MBytes18.8 %
4 AM 57.6 MBytes20.6 %12.9 MBytes9.1 %
3 AM 356.6 KBytes0.1 %396.1 KBytes0.3 %
2 AM 266.8 KBytes0.1 %364.3 KBytes0.3 %
1 AM 298.9 KBytes0.1 %331.9 KBytes0.2 %
12 AM 268.5 KBytes0.1 %352.8 KBytes0.2 %
11 PM 334.7 KBytes0.1 %393.9 KBytes0.3 %
10 PM 292.9 KBytes0.1 %382.1 KBytes0.3 %
9 PM 227.9 KBytes0.1 %321.7 KBytes0.2 %
8 PM 345.7 KBytes0.1 %351.9 KBytes0.2 %
7 PM 402.7 KBytes0.1 %355.8 KBytes0.2 %
6 PM 266.7 KBytes0.1 %363.7 KBytes0.3 %
5 PM 481.0 KBytes0.2 %420.2 KBytes0.3 %
4 PM 411.9 KBytes0.1 %355.1 KBytes0.2 %
3 PM 371.3 KBytes0.1 %378.1 KBytes0.3 %
2 PM 305.2 KBytes0.1 %367.0 KBytes0.3 %
1 PM 447.4 KBytes0.2 %373.8 KBytes0.3 %
12 PM 3.1 MBytes1.1 %5.4 MBytes3.8 %
11 AM 16.7 MBytes6.0 %5.3 MBytes3.7 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  9,156
Established1 4,576 [50 %]
Terminated0  2

TCP FlagsPkts SentPkts Rcvd
SYN0  9,156
RST|ACK0  43
RST1 26

AnomalyPkts Sent toPkts Rcvd from
Closed Empty TCP Conn.0  2

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP927.9 MBytes100% 345.4 MBytes100
Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
D8:43:AE:BB:DC:13 Network Card  
1C:6F:65:47:D9:D6 Network Card  
70:71:BC:31:70:0B Network Card  
D8:43:AE:BB:DE:41 Network Card  
192.168.1.30 192.168.1.30 
192.168.1.111 192.168.1.111 
2C:F0:5D:99:7A:79 Network Card  
D8:43:AE:BB:DE:38 Network Card  
Total Contacts10520
Received FromIP Address
D8:43:AE:BB:DC:13 Network Card  
1C:6F:65:47:D9:D6 Network Card  
70:71:BC:31:70:0B Network Card  
D8:43:AE:BB:DE:41 Network Card  
192.168.1.30 192.168.1.30 
192.168.1.111 192.168.1.111 
2C:F0:5D:99:7A:79 Network Card  
D8:43:AE:BB:DE:38 Network Card  
Total Contacts10555

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  29438/1.1 GBytesD8:43:AE:BB:DC:13 Network Card

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

910 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-GAROFALO  VoIP Medium Risk P2P Server :50001mail.google.com  HTTP Server Low Risk :https555.5 KBytes2.5 MBytesWed Jul 16 10:35:03 2025Wed Jul 16 10:53:16 202518:1313 sec   SYN ACK PUSH 
CPA-NGARCIA-Del [NetBIOS]  VoIP Medium Risk :51699mail.google.com  HTTP Server Low Risk :https8.5 KBytes22.2 KBytesWed Jul 16 10:52:52 2025Wed Jul 16 10:52:52 20250 sec37 sec   SYN ACK PUSH 
PRESIDENTE  VoIP Medium Risk :52262mail.google.com  HTTP Server Low Risk :https7.4 KBytes5.1 KBytesWed Jul 16 10:52:56 2025Wed Jul 16 10:52:57 20251 sec32 sec   SYN ACK PUSH 
Tribunal01  VoIP Medium Risk P2P Server :53546mail.google.com  HTTP Server Low Risk :https7.6 KBytes5.0 KBytesWed Jul 16 10:52:49 2025Wed Jul 16 10:52:49 20250 sec40 sec   SYN ACK PUSH 
ADM02 Medium Risk :55136mail.google.com  HTTP Server Low Risk :https446.7 KBytes499.9 KBytesWed Jul 16 10:28:51 2025Wed Jul 16 10:53:28 202524:371 sec   SYN ACK PUSH 
mail.google.com  HTTP Server Low Risk :httpsCPA-GAROFALO  VoIP Medium Risk P2P Server :55516800Wed Jul 16 10:52:37 2025Wed Jul 16 10:52:37 20250 sec52 sec   ACK 
ADM03  VoIP Medium Risk :55740mail.google.com  HTTP Server Low Risk :https15.1 KBytes7.7 KBytesWed Jul 16 10:49:52 2025Wed Jul 16 10:52:44 20252:5245 sec   SYN ACK PUSH 
Tesorero  VoIP Medium Risk :59790mail.google.com  HTTP Server Low Risk :https7.6 KBytes4.9 KBytesWed Jul 16 10:49:35 2025Wed Jul 16 10:53:21 20253:468 sec   SYN ACK PUSH 
CPA-ACICCHINO Medium Risk P2P Server :61535mail.google.com  HTTP Server Low Risk :https699.5 KBytes1.7 MBytesWed Jul 16 10:52:34 2025Wed Jul 16 10:53:04 202530 sec25 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 10:53:29 2025 [ntop uptime: 2 days 6:40:53]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"