(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about google.com

IP Address172.217.28.14 Flag for gTLD code com (Guessing from gTLD) [unicast] [ Purge Asset ]
First/Last SeenWed Jul 16 02:18:29 2025  -  Wed Jul 16 09:58:35 2025 [Inactive since 1 sec]
Domaincom
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
OS NameOS: Cisco [Cisco-louche1 ] 
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)122:122 [~6 hop(s)]
Total Data Sent46.1 MBytes/106,593 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd36.5 MBytes/78,667 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 57.5 %
  
Rcvd 42.5 %
Sent vs. Rcvd Data
Sent 55.8 %
  
Rcvd 44.2 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
9 AM 8.4 MBytes18.3 %5.5 MBytes15.1 %
8 AM 5.0 MBytes10.9 %6.3 MBytes17.3 %
7 AM 8.0 MBytes17.2 %8.0 MBytes22.0 %
6 AM 5.6 MBytes12.2 %3.2 MBytes8.8 %
5 AM 6.3 MBytes13.7 %3.7 MBytes10.1 %
4 AM 12.7 MBytes27.6 %9.7 MBytes26.4 %
3 AM 26.0 KBytes0.1 %32.1 KBytes0.1 %
2 AM 23.9 KBytes0.1 %27.7 KBytes0.1 %
1 AM 00.0 %00.0 %
12 AM 00.0 %00.0 %
11 PM 00.0 %00.0 %
10 PM 00.0 %00.0 %
9 PM 00.0 %00.0 %
8 PM 00.0 %00.0 %
7 PM 00.0 %00.0 %
6 PM 00.0 %00.0 %
5 PM 00.0 %00.0 %
4 PM 00.0 %00.0 %
3 PM 00.0 %00.0 %
2 PM 00.0 %00.0 %
1 PM 00.0 %00.0 %
12 PM 00.0 %00.0 %
11 AM 00.0 %00.0 %
10 AM 00.0 %00.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  762
Established0  381 [50 %]

TCP FlagsPkts SentPkts Rcvd
SYN0  762
RST|ACK0  5
RST1 0 

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP46.1 MBytes100% 35.5 MBytes
97%

 

UDP0.0 KBytes  1.1 MBytes
2%

 

Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
D8:43:AE:BB:DB:FB Network Card  
D8:43:AE:BB:DC:13 Network Card  
192.168.1.13 192.168.1.13 
D8:43:AE:BB:DF:31 Network Card  
2C:F0:5D:99:7A:79 Network Card  
D8:43:AE:BB:DE:41 Network Card  
192.168.1.11 192.168.1.11 
192.168.1.111 192.168.1.111 
Total Contacts400
Received FromIP Address
D8:43:AE:BB:DE:41 Network Card  
192.168.1.31 192.168.1.31 
192.168.1.11 192.168.1.11 
2C:F0:5D:99:7A:79 Network Card  
D8:43:AE:BB:DC:13 Network Card  
192.168.1.111 192.168.1.111 
D8:43:AE:BB:DF:31 Network Card  
192.168.1.13 192.168.1.13 
Total Contacts423

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  52373/72.9 MBytes192.168.1.11

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

1406 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
Sueldos01 Medium Risk :60353google.com  HTTP Server :https6.4 KBytes4.9 KBytesWed Jul 16 09:54:18 2025Wed Jul 16 09:58:03 20253:4533 sec   SYN ACK PUSH 
CPA-GAROFALO  VoIP Medium Risk P2P Server :60676google.com  HTTP Server :https52.7 KBytes134.6 KBytesWed Jul 16 09:54:35 2025Wed Jul 16 09:58:31 20253:565 sec   SYN ACK PUSH 
ADM04 Medium Risk :61343google.com  HTTP Server :https7.5 KBytes4.7 KBytesWed Jul 16 09:56:05 2025Wed Jul 16 09:58:35 20252:301 sec   SYN ACK PUSH 
CPA-GAROFALO  VoIP Medium Risk P2P Server :65137google.com  HTTP Server :https31.4 KBytes165.7 KBytesWed Jul 16 09:57:31 2025Wed Jul 16 09:58:19 202548 sec17 sec   SYN ACK PUSH 
Tribunal01  VoIP Medium Risk P2P Server :51984google.com  HTTP Server :https5.4 KBytes4.3 KBytesWed Jul 16 09:52:41 2025Wed Jul 16 09:58:10 20255:2926 sec   SYN ACK PUSH 
Tribunal01  VoIP Medium Risk P2P Server :52093google.com  HTTP Server :https4.5 KBytes4.2 KBytesWed Jul 16 09:54:37 2025Wed Jul 16 09:57:53 20253:1643 sec   SYN ACK PUSH 
PRESIDENTE  VoIP Medium Risk :52116google.com  HTTP Server :https3.9 KBytes3.6 KBytesWed Jul 16 09:56:25 2025Wed Jul 16 09:57:55 20251:3041 sec   SYN ACK PUSH 
PRESIDENTE  VoIP Medium Risk :52127google.com  HTTP Server :https3.6 KBytes3.6 KBytesWed Jul 16 09:57:26 2025Wed Jul 16 09:58:11 202545 sec25 sec   SYN ACK PUSH 
ADM02 Medium Risk :54939google.com  HTTP Server :https7.2 KBytes4.9 KBytesWed Jul 16 09:51:59 2025Wed Jul 16 09:58:03 20256:0433 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 09:58:36 2025 [ntop uptime: 2 days 5:46:00]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"