(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about 0.0.0.0

IP Address192.168.1.210   [unicast] [ Purge Asset ]
First/Last SeenMon Jun 9 04:14:28 2025  -  Sat Jun 14 00:29:20 2025 [Inactive since 0 sec]
MAC Address Network Interface Card (NIC)00:10:18:AC:4A:C4 
Nw Board VendorBROADCOM CORPORATION 
OS NameOS: Windows [Windows XP] 
Host LocationLocal (inside specified/local subnet)
IP TTL (Time to Live)1:64 [~0 hop(s)]
Total Data Sent685.5 MBytes/10,532,505 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent26,724 Pkts
Multicast TrafficSent 4.3 KBytes/68 Pkts 
Data Sent Stats
Local 45.1 %
  
Rem 54.9 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd17.4 GBytes/16,478,690 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 3.2 %
  
Rem 96.8 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 39.0 %
  
Rcvd 61.0 %
Sent vs. Rcvd Data
Sent 3.7 %
  
Rcvd 96.3 %
Used Subnet Routers 00:24:8C:DE:84:31 Network Card
Host TypeVoIP Host VoIP
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Medium RiskSuspicious activities: too many host contacts
  2. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] [Sent: closed-empty] [Rcvd: hostnet unreac] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
12 AM 3.8 MBytes3.0 %150.4 MBytes4.1 %
11 PM 4.7 MBytes3.8 %152.1 MBytes4.1 %
10 PM 4.5 MBytes3.6 %151.7 MBytes4.1 %
9 PM 4.4 MBytes3.6 %151.8 MBytes4.1 %
8 PM 4.6 MBytes3.7 %151.8 MBytes4.1 %
7 PM 4.6 MBytes3.7 %152.1 MBytes4.1 %
6 PM 4.8 MBytes3.9 %152.3 MBytes4.1 %
5 PM 4.9 MBytes3.9 %152.5 MBytes4.2 %
4 PM 5.0 MBytes4.0 %152.6 MBytes4.2 %
3 PM 5.4 MBytes4.4 %153.3 MBytes4.2 %
2 PM 5.3 MBytes4.3 %153.2 MBytes4.2 %
1 PM 5.1 MBytes4.1 %152.7 MBytes4.2 %
12 PM 5.4 MBytes4.3 %153.5 MBytes4.2 %
11 AM 5.3 MBytes4.2 %153.1 MBytes4.2 %
10 AM 5.2 MBytes4.2 %153.2 MBytes4.2 %
9 AM 5.3 MBytes4.3 %153.0 MBytes4.2 %
8 AM 5.4 MBytes4.4 %153.4 MBytes4.2 %
7 AM 5.4 MBytes4.4 %153.3 MBytes4.2 %
6 AM 5.6 MBytes4.5 %153.7 MBytes4.2 %
5 AM 5.7 MBytes4.6 %154.0 MBytes4.2 %
4 AM 5.7 MBytes4.6 %153.9 MBytes4.2 %
3 AM 5.9 MBytes4.7 %154.3 MBytes4.2 %
2 AM 6.0 MBytes4.8 %154.2 MBytes4.2 %
1 AM 6.0 MBytes4.8 %154.1 MBytes4.2 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted61,935 0 
Established30,953 [50 %] 1
Terminated2 0 

TCP FlagsPkts SentPkts Rcvd
SYN61,935 0 
RST|ACK30,599 10
RST0  158

AnomalyPkts Sent toPkts Rcvd from
Closed Empty TCP Conn.2 0 
ICMP Net Unreachable0  8

ARPPacket
Request Sent18,517
Reply Rcvd14,829 (80.1 %)
Reply Sent4,272

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP368.3 MBytes
53%

 

 16.8 GBytes
96%

 

UDP316.2 MBytes
46%

 

 573.4 MBytes
3%

 

ICMP0.0 KBytes  0.9 KBytes 
ICMPv60.1 KBytes  0.0 KBytes 
IPv60.1 KBytes  0.0 KBytes 
(R)ARP1023.7 KBytes  522.3 KBytes 
IGMP0.6 KBytes  0.0 KBytes 
Protocol Distribution
IP Distribution

 

ICMP Traffic

TypePkt SentPkt Rcvd
Unreach08

 

Last Contacted Peers

Sent ToIP Address
ns1.huaweicloud-dns.org 159.138.208.3 
ns1.huaweicloud-dns.org 190.92.196.2 
00:24:8C:DE:84:31 Network Card  
ns1.huaweicloud-dns.org 159.138.17.187 
router4.teamviewer.com 188.172.244.140 
wfbs-lspn20-p.activeupdate.trendmicro.com 23.205.233.55 
e2903.dscb.akamaiedge.net 2.21.48.124 
Total Contacts1551
Received FromIP Address
nustal05.advance.com.ar 200.0.243.10 
ns1.huaweicloud-dns.org 159.138.208.3 
ns1.huaweicloud-dns.org 190.92.196.2 
ns1.huaweicloud-dns.org 159.138.17.187 
router4.teamviewer.com 188.172.244.140 
wfbs-lspn20-p.activeupdate.trendmicro.com 23.205.233.55 
e2903.dscb.akamaiedge.net 2.21.48.124 
00:24:8C:DE:84:31 Network Card  
Total Contacts1187

 

IP Service Stats: Client Role

 # Loc. Req. Sent# Rem. Req. Sent# Pos. Reply Rcvd# Neg. Reply RcvdLocal RndTripRem RndTrip
DNS4,158,70097.0%104,2472.0%105,9052.0%4,155,87297.0%0.0 ms - 23.0 sec3.1 ms - 989.1 ms

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
domain535044/545.9 MBytes00:24:8C:DE:84:31 Network Card   
www804490/12.5 MBytese2903.dscb.akamaiedge.net   
ntp123232/10.9 KBytestime.windows.com 232/10.9 KBytestime.windows.com
https44361116/16.2 GBytesrouter4.teamviewer.com   

 

TCP/UDP - Traffic on Other Ports

Client PortServer Port
     

 

TCP/UDP Recently Used Ports

Client PortServer Port

 

113 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
0.0.0.0  VoIP Medium Risk :58257router3.teamviewer.com  HTTP Server :https261.7 KBytes236.5 KBytesFri Jun 13 05:26:28 2025Sat Jun 14 00:28:35 202519:02:0745 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Sat Jun 14 00:29:20 2025 [ntop uptime: 4 days 20:16:34]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)