(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about 0.0.0.0

IP Address192.168.1.20   [unicast] [ Purge Asset ]
First/Last SeenMon Jun 9 05:13:20 2025  -  Sat Jun 14 12:55:51 2025 [Inactive since 2 sec]
MAC Address Network Interface Card (NIC)D8:5E:D3:A4:56:94 
OS NameOS: Windows [Windows 2000 Professional SP4] 
Host LocationLocal (inside specified/local subnet)
IP TTL (Time to Live)1:128 [~0 hop(s)]
Total Data Sent301.9 MBytes/2,009,192 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent2,128 Pkts
Multicast TrafficSent 4.7 MBytes/21,882 Pkts 
Data Sent Stats
Local 0.7 %
  
Rem 99.3 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd3.9 GBytes/3,279,742 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
0 %
 
Rem 100 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 38.0 %
  
Rcvd 62.0 %
Sent vs. Rcvd Data
Sent 7.0 %
  
Rcvd 93.0 %
Used Subnet Routers 00:24:8C:DE:84:31 Network Card
Host TypeVoIP Host VoIP
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Medium RiskWrong network mask or bridging enabled
  2. Medium RiskSuspicious activities: too many host contacts
  3. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] [Sent: closed-empty] [Rcvd: hostnet unreac] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
12 PM 98.3 KBytes2.3 %248.6 KBytes0.9 %
11 AM 509.4 KBytes11.8 %4.1 MBytes15.8 %
10 AM 114.6 KBytes2.7 %278.7 KBytes1.0 %
9 AM 131.4 KBytes3.0 %308.1 KBytes1.2 %
8 AM 124.2 KBytes2.9 %170.9 KBytes0.6 %
7 AM 142.0 KBytes3.3 %330.5 KBytes1.2 %
6 AM 454.6 KBytes10.5 %12.5 MBytes47.8 %
5 AM 125.9 KBytes2.9 %184.8 KBytes0.7 %
4 AM 144.4 KBytes3.3 %311.1 KBytes1.2 %
3 AM 98.7 KBytes2.3 %138.2 KBytes0.5 %
2 AM 124.5 KBytes2.9 %192.7 KBytes0.7 %
1 AM 166.3 KBytes3.8 %363.5 KBytes1.4 %
12 AM 122.4 KBytes2.8 %327.6 KBytes1.2 %
11 PM 111.5 KBytes2.6 %155.7 KBytes0.6 %
10 PM 294.4 KBytes6.8 %338.1 KBytes1.3 %
9 PM 134.9 KBytes3.1 %300.4 KBytes1.1 %
8 PM 154.3 KBytes3.6 %264.3 KBytes1.0 %
7 PM 205.9 KBytes4.8 %3.2 MBytes12.1 %
6 PM 135.9 KBytes3.1 %140.9 KBytes0.5 %
5 PM 142.8 KBytes3.3 %244.1 KBytes0.9 %
4 PM 160.2 KBytes3.7 %358.3 KBytes1.3 %
3 PM 162.1 KBytes3.8 %169.8 KBytes0.6 %
2 PM 153.4 KBytes3.5 %187.7 KBytes0.7 %
1 PM 308.8 KBytes7.1 %1.4 MBytes5.5 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted113,352 2
Established19,545 [17 %] 20 [100 %]
Terminated2 0 

TCP FlagsPkts SentPkts Rcvd
SYN113,352 2
RST|ACK3,120 1,563
RST1 484

AnomalyPkts Sent toPkts Rcvd from
Closed Empty TCP Conn.2 0 
ICMP Net Unreachable0  1

ARPPacket
Request Sent11,270
Reply Rcvd10,027 (89.0 %)
Reply Sent9,167

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP281.8 MBytes
93%

 

 3.9 GBytes100
UDP19.2 MBytes
6%

 

 4.9 MBytes 
ICMP0.0 KBytes  0.1 KBytes 
ICMPv60.2 KBytes  0.0 KBytes 
IPv60.2 KBytes  0.0 KBytes 
(R)ARP918.1 KBytes  524.9 KBytes 
IGMP0.9 KBytes  0.0 KBytes 
Protocol Distribution
IP Distribution

 

ICMP Traffic

TypePkt SentPkt Rcvd
Unreach01

 

Last Contacted Peers

Sent ToIP Address
assets.msn.com 170.51.247.18 
client.wns.windows.com 172.172.255.218 
time.windows.com 40.119.6.228 
na.luckpool.net 149.56.27.47 
00:24:8C:DE:84:31 Network Card  
200.69.128.1 200.69.128.1 
settings-win.data.microsoft.com 52.140.118.28 
Total Contacts56675
Received FromIP Address
client.wns.windows.com 172.172.255.218 
v10.events.data.microsoft.com 52.168.117.168 
th.bing.com 23.64.58.147 
assets.msn.com 170.51.247.18 
time.windows.com 40.119.6.228 
200.69.128.1 200.69.128.1 
settings-win.data.microsoft.com 52.140.118.28 
00:24:8C:DE:84:31 Network Card  
Total Contacts41573

 

IP Service Stats: Client Role

 # Loc. Req. Sent# Rem. Req. Sent# Pos. Reply Rcvd# Neg. Reply RcvdLocal RndTripRem RndTrip
DNS13,00544.0%16,46455.0%19,05899.0%1420.0%0.0 ms - 429391.6 sec2.7 ms - 1.5 sec
HTTP00.0%00.0%21100.0%00.0%0.0 ms - 0.0 ms0.0 ms - 0.0 ms

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
domain5338626/4.9 MBytes00:24:8C:DE:84:31 Network Card   
www8032342/565.4 MBytesc.pki.goog   
ntp12330/1.4 KBytestime.windows.com 30/1.4 KBytestime.windows.com
https44360757/3.4 GBytesclient.wns.windows.com   

 

TCP/UDP - Traffic on Other Ports

Client PortServer Port

 

TCP/UDP Recently Used Ports

Client PortServer Port

 

P2P Recently Exchanged Files

File Name
  1. <unknown file> Upload Download 

 

126 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
0.0.0.0  VoIP Medium Risk P2P Server :57061na.luckpool.net :39602600Sat Jun 14 12:53:13 2025Sat Jun 14 12:53:28 202515 sec2:25   SYN 
0.0.0.0  VoIP Medium Risk P2P Server :57062na.luckpool.net :39602600Sat Jun 14 12:53:44 2025Sat Jun 14 12:53:59 202515 sec1:54   SYN 
0.0.0.0  VoIP Medium Risk P2P Server :57063na.luckpool.net :39602600Sat Jun 14 12:54:15 2025Sat Jun 14 12:54:30 202515 sec1:23   SYN 
0.0.0.0  VoIP Medium Risk P2P Server :57064na.luckpool.net :39602600Sat Jun 14 12:54:46 2025Sat Jun 14 12:55:01 202515 sec52 sec   SYN 
0.0.0.0  VoIP Medium Risk P2P Server :57073na.luckpool.net :39602600Sat Jun 14 12:55:17 2025Sat Jun 14 12:55:32 202515 sec21 sec   SYN 
0.0.0.0  VoIP Medium Risk P2P Server :57074na.luckpool.net :39601560Sat Jun 14 12:55:48 2025Sat Jun 14 12:55:51 20253 sec2 sec   SYN 
0.0.0.0  VoIP Medium Risk P2P Server :60928client.wns.windows.com  HTTP Server Low Risk :https150.7 KBytes177.2 KBytesFri Jun 13 23:07:31 2025Sat Jun 14 12:55:37 202513:48:0616 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Sat Jun 14 12:55:53 2025 [ntop uptime: 5 days 8:43:07]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)