daily general firewall statistics previous next
TRANSCRIPT
Blocked
Accepted0
500100015002000250030003500400045005000
0 1 2 3 4 5 6 7 8 9 1011121314 151617181920 212223
Eve
nts
Hour of the Day
15 502 1 15 503 684Web4 759 1 919 6 678 1System1 872 1 872 61Mail
771 771 2Monitoring90 74 164 122Other
771 22 223 2 114 25 108 872Total:
Inside 192.168.0.114/192.168.0.114/ Accepted 5 801
Paris 192.168.20.250/192.168.20.250/ Blocked 4 553
External 195.221.0.6/raclette.synchrotron-soleil.fr/ Accepted 771
External 213.136.31.115/kahuna.customer.bit.nl/ Blocked 2 421
Previous Nextlundi janvier 3, 2005Daily General Firewall Statistics
External Visitors 1 159
Internal Users 18 11
External Destinations 630 25
Internal Servers 9 3
Source Action Hits Total MB
Network Forensics - Daily Filtering by Hour
Services - Top 5 Accepted Services by HitsNetwork Forensics - Most Active Internal User and External Visitor
Traffic - Traffic Activity Trends Based on The Number of IP Addresses
Accepted Blocked
Inbound
Outbound
Internal
1
17
11
1 570
2
8
Services - Number of Different Services
Accepted:
Blocked:
Accepted:
9
Blocked:
Accepted:
1
6
4
2
5
3
3 Blocked:
4 2 114
5 4 903
6 22 223
2 7 415
1 771
© NetReport www.net-report.net Page 1/41Report printed on lundi janvier 10, 2005 at 18:26
Internal Accepted
Outbound Accepted
Inbound Accepted0
300600900
1200150018002100240027003000330036003900
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
Eve
nts
AcceptedAccepted
Hour of the Day
Internal Blocked
Outbound Blocked
Inbound Blocked0
300
600
900
1200
1500
1800
2100
2400
2700
3000
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
Eve
nts
BlockedBlocked
Hour of the Day
lundi janvier 3, 2005Graph of Events by Hour of the Day
Traffic - Accepted Traffic
Traffic - Blocked Traffic
© NetReport www.net-report.net Page 2/41Report printed on lundi janvier 10, 2005 at 18:26
Hour
Total Hits
Accepted Blocked Accepted Blocked Accepted Blocked
Inbound Outbound Internal
Accepted Blocked Total
lundi janvier 3, 2005Graph of Events by Hour of the Day
45429400:00 16030 73 41 221 8941327201:00 14130 73 36 199 7543328102:00 15236 71 35 210 8146229003:00 17233 72 47 218 9246029904:00 16130 78 41 221 9043228205:00 15030 72 38 210 8236419206:00 17230 73 86 119 5646028507:00 17533 72 55 213 87
1 09312108:00 97233 82 906 39 332 93956409:00 2 37530 342 2 237 222 1082 35984710:00 1 51233 614 1 375 233 1043 20672811:00 2 47827 525 2 375 203 765 0012 80612:00 2 19533 2 571 2 078 227 84 83 69749913:00 3 19836 285 3 075 214 874 68281114:00 3 87133 582 3 750 229 882 21147415:00 1 73736 254 1 562 219 139 11 63449116:00 1 14333 291 1 012 200 982 98991317:00 2 07633 689 1 904 224 1391 95145918:00 1 49230 234 1 362 225 100
44128619:00 15533 74 42 212 8041427220:00 14233 75 35 197 7445929421:00 16536 73 44 221 8544728722:00 16033 74 44 213 8343428023:00 15427 66 43 214 84
771 7 415 22 223 4 903 2 114 9Total for 1/3/2005 12 32725 108 37 435
© NetReport www.net-report.net Page 3/41Report printed on lundi janvier 10, 2005 at 18:26
InternalInbound OutboundType Total MBTotal HitsAction
lundi janvier 3, 2005
Blocked and Accepted Traffic Figures Analyzed by Number of Hits
872Accepted Accepted 771 22 223 2 114 25 108Total Accepted: 771 22 223 2 114 25 108 872
Blocked Denied 7 415 4 903 9 12 327Total Blocked: 7 415 4 903 9 12 327
Total lundi janvier 3, 2005 8728 186 27 126 2 123 37 435
© NetReport www.net-report.net Page 4/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Service Total HitsDestination Area
lundi janvier 3, 2005
Service comment
Top 100 Accepted Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 25 108
External 771
External Inside 771
External Inside 161 SNMP PIX-6-302015 771
© NetReport www.net-report.net Page 5/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Service Total HitsDestination Area
lundi janvier 3, 2005
Service comment
Top 100 Accepted Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 25 108
Inside 22 128
Inside 64.74.45.1420 1
Inside 64.74.45.1420 80 World Wide Web HTTP PIX-6-302013 1
Inside External 22 048
Inside External 80 World Wide Web HTTP PIX-6-302013 15 042
Inside External 53 Domain Name Server PIX-6-302015 4 594
Inside External 110 Post Office Protocol - Version 3 PIX-6-302013 1 640
Inside External 443 http protocol over TLS/SSL PIX-6-302013 432
Inside External 53 Domain Name Server PIX-6-302013 165
Inside External 25 Simple Mail Transfer PIX-6-302013 85
Inside External 8194 PIX-6-302013 69
Inside External 8196 PIX-6-302013 6
Inside External 8195 PIX-6-302013 6
Inside External 8294 PIX-6-302013 3
Inside External 8292 PIX-6-302013 3
Inside External 48129 PIX-6-302015 3
Inside Paris 69
Inside Paris 2967 SSC-AGENT PIX-6-302015 56
Inside Paris 139 NETBIOS Session Service PIX-6-302013 13
Inside Sales 10
Inside Sales 20 File Transfer [Default Data] PIX-6-302013 5
Inside Sales 3389 MS WBT Server PIX-6-302013 3
Inside Sales 21 File Transfer [Control] PIX-6-302013 2
© NetReport www.net-report.net Page 6/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Service Total HitsDestination Area
lundi janvier 3, 2005
Service comment
Top 100 Accepted Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 25 108
Paris 2 187
Paris External 175
Paris External 110 Post Office Protocol - Version 3 PIX-6-302013 131
Paris External 80 World Wide Web HTTP PIX-6-302013 26
Paris External 25 Simple Mail Transfer PIX-6-302013 16
Paris External 443 http protocol over TLS/SSL PIX-6-302013 2
Paris Inside 2 012
Paris Inside 53 Domain Name Server PIX-6-302015 1 901
Paris Inside 88 Kerberos PIX-6-302015 21
Paris Inside 445 Microsoft-DS PIX-6-302013 15
Paris Inside 137 NETBIOS Name Service PIX-6-302015 15
Paris Inside 138 NETBIOS Datagram Service PIX-6-302015 13
Paris Inside 389 Lightweight Directory Access Protocol PIX-6-302013 9
Paris Inside 123 Network Time Protocol PIX-6-302015 9
Paris Inside 1026 Calender Access Protocol PIX-6-302013 8
Paris Inside 389 Lightweight Directory Access Protocol PIX-6-302015 8
Paris Inside 26409 PIX-6-302015 7
Paris Inside 139 NETBIOS Session Service PIX-6-302013 3
Paris Inside 135 DCE endpoint resolution PIX-6-302013 3
© NetReport www.net-report.net Page 7/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Service Total HitsDestination Area
lundi janvier 3, 2005
Service comment
Top 100 Accepted Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 25 108
Sales 22
Sales Inside 22
Sales Inside 515 spooler PIX-6-302013 22
© NetReport www.net-report.net Page 8/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
External 3 451
External Firewall 3 451
External Firewall 0 Reserved PIX-3-313001 1 743
External Firewall 64561 PIX-6-106015 49
External Firewall 55641 PIX-6-106015 43
External Firewall 5870 PIX-6-106015 40
External Firewall 0 Reserved PIX-3-106014 39
External Firewall 63455 PIX-6-106015 34
External Firewall 64562 PIX-6-106015 31
External Firewall 60164 PIX-6-106015 24
External Firewall 60371 PIX-6-106015 24
External Firewall 56916 PIX-6-106015 23
External Firewall 60380 PIX-6-106015 23
External Firewall 60203 PIX-6-106015 22
External Firewall 60207 PIX-6-106015 22
External Firewall 60218 PIX-6-106015 22
External Firewall 60350 PIX-6-106015 22
External Firewall 4682 PIX-6-106015 21
External Firewall 5873 PIX-6-106015 21
External Firewall 59759 PIX-6-106015 21
External Firewall 60070 PIX-6-106015 21
External Firewall 60154 PIX-6-106015 21
External Firewall 60198 PIX-6-106015 21
External Firewall 60210 PIX-6-106015 21
External Firewall 59711 PIX-6-106015 20
External Firewall 60208 PIX-6-106015 20
© NetReport www.net-report.net Page 9/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
External 3 451
External Firewall 3 451
External Firewall 60338 PIX-6-106015 19
External Firewall 2780 LBC Control PIX-6-106015 18
External Firewall 4656 PIX-6-106015 18
External Firewall 4659 PIX-6-106015 18
External Firewall 55448 PIX-6-106015 18
External Firewall 59817 PIX-6-106015 18
External Firewall 59927 PIX-6-106015 18
External Firewall 60340 PIX-6-106015 18
External Firewall 60351 PIX-6-106015 18
External Firewall 3386 GPRS SIG PIX-6-106015 17
External Firewall 3388 Terminal Server PIX-6-106015 17
External Firewall 3390 Distributed Service Coordinator PIX-6-106015 17
External Firewall 3393 D2K Tapestry Client to Server PIX-6-106015 17
External Firewall 4676 PIX-6-106015 17
External Firewall 56159 PIX-6-106015 17
External Firewall 56172 PIX-6-106015 17
External Firewall 56191 PIX-6-106015 17
External Firewall 56294 PIX-6-106015 17
External Firewall 56337 PIX-6-106015 17
External Firewall 56407 PIX-6-106015 17
External Firewall 59785 PIX-6-106015 17
External Firewall 60069 PIX-6-106015 17
External Firewall 60089 PIX-6-106015 17
External Firewall 60142 PIX-6-106015 17
© NetReport www.net-report.net Page 10/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
External 3 451
External Firewall 3 451
External Firewall 56284 PIX-6-106015 16
External Firewall 59940 PIX-6-106015 16
External Firewall 60149 PIX-6-106015 16
External Firewall 60180 PIX-6-106015 16
External Firewall 60249 PIX-6-106015 16
External Firewall 60267 PIX-6-106015 16
External Firewall 3690 Subversion PIX-6-106015 15
External Firewall 4627 PIX-6-106015 15
External Firewall 4674 PIX-6-106015 15
External Firewall 54709 PIX-6-106015 15
External Firewall 58732 PIX-6-106015 15
External Firewall 59610 PIX-6-106015 15
External Firewall 59721 PIX-6-106015 15
External Firewall 59823 PIX-6-106015 15
External Firewall 59946 PIX-6-106015 15
External Firewall 59988 PIX-6-106015 15
External Firewall 60068 PIX-6-106015 15
External Firewall 60372 PIX-6-106015 15
External Firewall 60375 PIX-6-106015 15
External Firewall 4621 PIX-6-106015 14
External Firewall 4669 PIX-6-106015 14
External Firewall 56162 PIX-6-106015 14
External Firewall 59603 PIX-6-106015 14
External Firewall 59618 PIX-6-106015 14
© NetReport www.net-report.net Page 11/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
External 3 451
External Firewall 3 451
External Firewall 59748 PIX-6-106015 14
External Firewall 59901 PIX-6-106015 14
External Firewall 59944 PIX-6-106015 14
External Firewall 59952 PIX-6-106015 14
External Firewall 59977 PIX-6-106015 14
External Firewall 60058 PIX-6-106015 14
External Firewall 60205 PIX-6-106015 14
External Firewall 60410 PIX-6-106015 14
External Firewall 60418 PIX-6-106015 14
External Firewall 4681 PIX-6-106015 13
External Firewall 55302 PIX-6-106015 13
External Firewall 58061 PIX-6-106015 13
External Firewall 59980 PIX-6-106015 13
External Firewall 60193 PIX-6-106015 13
External Firewall 60391 PIX-6-106015 13
External Firewall 4635 PIX-6-106015 12
External Firewall 4677 PIX-6-106015 12
External Firewall 4687 PIX-6-106015 12
External Firewall 59563 PIX-6-106015 12
External Firewall 59728 PIX-6-106015 12
External Firewall 59758 PIX-6-106015 12
External Firewall 59900 PIX-6-106015 12
External Firewall 59954 PIX-6-106015 12
External Firewall 60215 PIX-6-106015 12
© NetReport www.net-report.net Page 12/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
External 3 451
External Firewall 3 451
External Firewall 65031 PIX-6-106015 12
© NetReport www.net-report.net Page 13/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
Inside 319
Inside External 319
Inside External 2847 AIMPP Port Req PIX-4-106023_ACL_inside 285
Inside External 80 World Wide Web HTTP PIX-6-106015 34
© NetReport www.net-report.net Page 14/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Source Area Service Total HitsDestination Area Service comment
Top 100 Blocked Services by Source and Destination
Rule or Message Numberlundi janvier 3, 2005 8 330
Paris 4 560
Paris External 4 560
Paris External 53 Domain Name Server PIX-4-106023_ACL_PARIS 4 560
© NetReport www.net-report.net Page 15/41Report printed on lundi janvier 10, 2005 at 18:26
Internal Blocked
Outbound Blocked
Inbound Blocked
Internal Accepted
Outbound Accepted
Inbound Accepted
0
1000
2000
3000
4000
5000
6000
7000
8000
9000
10000
11000
12000
13000
14000
15000
16000
17000
18000
PIX-3-
1060
14
PIX-3-
3130
01
PIX-6-
1060
15
PIX-6-
3020
13
PIX-6-
3020
15
PIX-4-
1060
23_A
CL_ins
ide
PIX-4-
1060
23_A
CL_PARIS
Eve
nts
lundi janvier 3, 2005Number of Events by Rule or Message
Events by Rule or Message Number
© NetReport www.net-report.net Page 16/41Report printed on lundi janvier 10, 2005 at 18:26
Outbound Total Hits
Accepted Blocked Accepted Blocked Accepted Blocked
Inbound Internal
Accepted Blocked Total
lundi janvier 3, 2005
Events by Rule or Message Number
Number of Events by Rule or Message
3939PIX-3-106014 391 7431 743PIX-3-313001 1 7435 6795 679PIX-6-106015 5 633 37 9
17 71017 710PIX-6-302013 17 626 847 3987 398PIX-6-302015 771 4 597 2 030
306306PIX-4-106023_ACL_inside 3064 5604 560PIX-4-106023_ACL_PARIS 4 560
771 7 415 22 223 4 903 2 114 9Total 03/janvier/2005 12 32725 108 37 435
© NetReport www.net-report.net Page 17/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Internal User
Top 30 Accepted Internal Users Sorted by Hits.
Hits Hits %
lundi janvier 3, 2005
K-Bytes K-Bytes % Elapsed Time (min) Elaps. Time %
Inside 192.168.0.114 5 801 277 601 5 98123,84% 31,89% 23,30%Inside 192.168.0.10 4 830 844 4 71019,85% 0,10% 18,35%Inside 192.168.0.120 4 105 354 890 2 18516,87% 40,76% 8,51%Paris 192.168.20.250 1 873 611 4047,70% 0,07% 1,57%Inside 192.168.0.123 1 841 17 551 1 9597,56% 2,02% 7,63%Inside 192.168.0.112 1 506 9 683 7396,19% 1,11% 2,88%Inside 192.168.0.119 1 249 8 296 1 6875,13% 0,95% 6,57%Inside 192.168.0.108 945 16 072 7053,88% 1,85% 2,75%Inside 192.168.0.116 896 16 713 8013,68% 1,92% 3,12%Inside 192.168.0.106 367 6 036 1751,51% 0,69% 0,68%Inside 192.168.0.110 316 2 288 1181,30% 0,26% 0,46%Paris 192.168.20.103 314 8 790 5721,29% 1,01% 2,23%Inside 192.168.0.118 121 3 731 670,50% 0,43% 0,26%Inside 192.168.0.102 67 22 522 3 0190,28% 2,59% 11,76%Inside 192.168.0.100 54 23 579 670,22% 2,71% 0,26%Inside 192.168.0.104 29 98 876 2 4640,12% 11,36% 9,60%Sales 192.168.245.252 22 1 330 60,09% 0,15% 0,02%Inside 192.168.0.101 1 1 183 40,00% 0,14% 0,02%
24 337 870 596 25 664Total for the above User list: 100,00% 100,00% 100,00%
24 337 870 596 25 664Total for all User for the same period:
© NetReport www.net-report.net Page 18/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Visitor
Top 30 Accepted Visitors Sorted by Hits.
Hits Hits %
lundi janvier 3, 2005
K-Bytes K-Bytes % Elapsed Time (min) Elaps. Time %
External 195.221.0.6/raclette.synchrotron-soleil.fr 771 1 502 1 680100,00% 100,00% 100,00%771 1 502 1 680Total for the above User list: 100,00% 100,00% 100,00%
24 337 870 596 25 664Total for all User for the same period:
© NetReport www.net-report.net Page 19/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Internal User
Top 10 Accepted Internal Users with their Top 10 Accepted Services
Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
Inside 192.168.0.114 5 801
5 639External PIX-6-30201380 World Wide Web HTTP150External PIX-6-302013110 Post Office Protocol - Version 3
11External PIX-6-302013443 http protocol over TLS/SSL1External PIX-6-30201325 Simple Mail Transfer
Inside 192.168.0.10 4 830
4 594External PIX-6-30201553 Domain Name Server165External PIX-6-30201353 Domain Name Server
56Paris PIX-6-3020152967 SSC-AGENT13Paris PIX-6-302013139 NETBIOS Session Service
2External PIX-6-30201380 World Wide Web HTTP
Inside 192.168.0.120 4 105
3 949External PIX-6-30201380 World Wide Web HTTP113External PIX-6-302013443 http protocol over TLS/SSL
39External PIX-6-302013110 Post Office Protocol - Version 34External PIX-6-30201325 Simple Mail Transfer
Paris 192.168.20.250 1 873
1 869Inside PIX-6-30201553 Domain Name Server3External PIX-6-30201380 World Wide Web HTTP1External PIX-6-302013443 http protocol over TLS/SSL
Inside 192.168.0.123 1 841
1 728External PIX-6-30201380 World Wide Web HTTP75External PIX-6-302013110 Post Office Protocol - Version 319External PIX-6-30201325 Simple Mail Transfer18External PIX-6-302013443 http protocol over TLS/SSL
164.74.45.1420 PIX-6-30201380 World Wide Web HTTP
© NetReport www.net-report.net Page 20/41Report printed on lundi janvier 10, 2005 at 18:26
Source Area Internal User
Top 10 Accepted Internal Users with their Top 10 Accepted Services
Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
Inside 192.168.0.112 1 506
1 437External PIX-6-30201380 World Wide Web HTTP67External PIX-6-302013110 Post Office Protocol - Version 3
2External PIX-6-30201325 Simple Mail Transfer
Inside 192.168.0.119 1 249
885External PIX-6-30201380 World Wide Web HTTP191External PIX-6-302013443 http protocol over TLS/SSL168External PIX-6-302013110 Post Office Protocol - Version 3
5External PIX-6-30201325 Simple Mail Transfer
Inside 192.168.0.108 945
533External PIX-6-302013110 Post Office Protocol - Version 3392External PIX-6-30201380 World Wide Web HTTP
14External PIX-6-302013443 http protocol over TLS/SSL5External PIX-6-30201325 Simple Mail Transfer1Sales PIX-6-3020133389 MS WBT Server
Inside 192.168.0.116 896
677External PIX-6-30201380 World Wide Web HTTP108External PIX-6-302013110 Post Office Protocol - Version 3
84External PIX-6-302013443 http protocol over TLS/SSL18External PIX-6-30201325 Simple Mail Transfer
5Sales PIX-6-30201320 File Transfer [Default Data]2Sales PIX-6-3020133389 MS WBT Server2Sales PIX-6-30201321 File Transfer [Control]
Inside 192.168.0.106 367
226External PIX-6-30201380 World Wide Web HTTP139External PIX-6-302013110 Post Office Protocol - Version 3
2External PIX-6-30201325 Simple Mail Transfer
© NetReport www.net-report.net Page 21/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Accepted Visitors with their Top 10 Accepted Services
Source Area Visitor Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
External 195.221.0.6/raclette.synchrotron-soleil.fr 771
771Inside PIX-6-302015161 SNMP
© NetReport www.net-report.net Page 22/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Internal Users with their Top 10 Blocked Services
Source Area Internal User Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
Paris
4 552External PIX-4-106023_ACL_PARIS53 Domain Name Server1External PIX-6-10601580 World Wide Web HTTP
192.168.20.250 4 553
Inside
285External PIX-4-106023_ACL_inside2847 AIMPP Port Req
192.168.0.10 285
Inside
17External PIX-6-10601580 World Wide Web HTTP
192.168.0.114 17
Inside
8External PIX-6-10601580 World Wide Web HTTP3External PIX-4-106023_ACL_inside445 Microsoft-DS3External PIX-4-106023_ACL_inside139 NETBIOS Session Service
192.168.0.112 14
Inside
9External PIX-4-106023_ACL_inside8080 HTTP Alternate (see port 80)2External PIX-6-10601580 World Wide Web HTTP1External PIX-6-106015443 http protocol over TLS/SSL
192.168.0.120 12
Paris
8External PIX-4-106023_ACL_PARIS53 Domain Name Server1External PIX-6-10601580 World Wide Web HTTP
192.168.20.103 9
Sales
8Inside PIX-6-1060151493 netmap_lm
192.168.245.68 8
Inside
6External PIX-4-106023_ACL_inside8294
192.168.0.102 6
Inside
4External PIX-6-10601580 World Wide Web HTTP
192.168.0.123 4
© NetReport www.net-report.net Page 23/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Internal Users with their Top 10 Blocked Services
Source Area Internal User Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
Inside
2External PIX-6-10601580 World Wide Web HTTP
192.168.0.116 2
© NetReport www.net-report.net Page 24/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Visitors with their Top 10 Blocked Services
Source Area Visitor Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
External
24Firewall PIX-6-1060156016424Firewall PIX-6-1060156037123Firewall PIX-6-1060156038022Firewall PIX-6-1060156020322Firewall PIX-6-1060156020722Firewall PIX-6-1060156021822Firewall PIX-6-1060156035021Firewall PIX-6-106015468221Firewall PIX-6-1060155975921Firewall PIX-6-10601560070
213.136.31.115/kahuna.customer.bit.nl 2 421
External
861Firewall PIX-3-3130010 Reserved
142.232.8.6/cypress.bcit.ca 861
External
859Firewall PIX-3-3130010 Reserved
62.93.162.206 859
External
17Firewall PIX-6-1060153386 GPRS SIG17Firewall PIX-6-1060153388 Terminal Server17Firewall PIX-6-1060153393 D2K Tapestry Client to Server17Firewall PIX-6-1060153390 Distributed Service Coordinator17Firewall PIX-6-1060155615917Firewall PIX-6-1060155617217Firewall PIX-6-1060155619117Firewall PIX-6-1060155629417Firewall PIX-6-1060155633717Firewall PIX-6-10601556407
195.6.255.130/commune-chateau-thierry.rain.fr 499
© NetReport www.net-report.net Page 25/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Visitors with their Top 10 Blocked Services
Source Area Visitor Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
External
3Firewall PIX-6-1060153416 AirMobile IS Command Port3Firewall PIX-6-1060153845 V-ONE Single Port Proxy3Firewall PIX-6-1060154160 Jini Discovery3Firewall PIX-6-106015541243Firewall PIX-6-106015547423Firewall PIX-6-106015586083Firewall PIX-6-106015586113Firewall PIX-6-1060156401 Seagate Software3Firewall PIX-6-1060156402 Seagate Software2Firewall PIX-6-1060151802 ConComp1
208.162.171.162/natasha.hq.counterpane.com 258
External
8Firewall PIX-6-106015561798Firewall PIX-6-106015562007Firewall PIX-6-106015578456Firewall PIX-6-106015579546Firewall PIX-6-106015605256Firewall PIX-6-106015605795Firewall PIX-6-106015579085Firewall PIX-6-106015605355Firewall PIX-6-106015605864Firewall PIX-6-10601556170
81.80.20.66/gw.axipe.com 232
© NetReport www.net-report.net Page 26/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Visitors with their Top 10 Blocked Services
Source Area Visitor Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
External
2Firewall PIX-6-106015615772Firewall PIX-6-106015615762Firewall PIX-6-106015615722Firewall PIX-6-106015608892Firewall PIX-6-10601511972Firewall PIX-6-10601511752Firewall PIX-6-10601511732Firewall PIX-6-10601511472Firewall PIX-6-10601511452Firewall PIX-6-1060151119
161.44.173.71/puck.cisco.com 212
External
4Firewall PIX-6-106015549784Firewall PIX-6-106015549764Firewall PIX-6-106015549714Firewall PIX-6-106015549694Firewall PIX-6-106015548934Firewall PIX-6-106015548914Firewall PIX-6-106015548654Firewall PIX-6-106015547734Firewall PIX-6-106015540844Firewall PIX-6-10601554068
82.226.58.44/arwen.prelude-ids.org 154
© NetReport www.net-report.net Page 27/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Visitors with their Top 10 Blocked Services
Source Area Visitor Total HitsRule or Message NumberDestination AreaService Comment
lundi janvier 3, 2005
External
17Firewall PIX-6-1060156006915Firewall PIX-6-1060153690 Subversion15Firewall PIX-6-1060155470915Firewall PIX-6-1060155873215Firewall PIX-6-10601560068
7Firewall PIX-6-1060153765 Remote Traceroute5Firewall PIX-6-10601543183Firewall PIX-6-10601538763Firewall PIX-6-1060153763 XO Wave Control Port3Firewall PIX-6-10601563307
212.77.168.194/mail.landratsamt-regensburg.de 151
External
40Firewall PIX-6-106015587021Firewall PIX-6-1060155873
5Firewall PIX-6-10601560464Firewall PIX-6-10601558684Firewall PIX-6-1060155988 WBEM HTTP3Firewall PIX-6-10601558353Firewall PIX-6-10601558382Firewall PIX-6-10601558422Firewall PIX-6-10601558532Firewall PIX-6-1060155861
195.101.248.102/euryte.ip-france.fr 104
© NetReport www.net-report.net Page 28/41Report printed on lundi janvier 10, 2005 at 18:26
161 - SNMP
Incoming Accepted ServicesIncoming Accepted Services
Warning: the graph only displays the first 20 results.
Top 30 Incoming Accepted Services Sorted by KB.lundi janvier 3, 2005
© NetReport www.net-report.net Page 29/41Report printed on lundi janvier 10, 2005 at 18:26
Service Service Comment
Top 30 Incoming Accepted Services Sorted by KB.
Hits Hits %
lundi janvier 3, 2005
KB KB % Elapsed Time (min) Elaps. Time %
161 SNMP 7711 502 1 680100,00%100,00% 100,00%
Total for the above Incoming Accepted Services list: 7711 502 1 680100,00% 100,00% 100,00%
771 1 680Total for all Incoming Accepted Services for the same period: 1 502
© NetReport www.net-report.net Page 30/41Report printed on lundi janvier 10, 2005 at 18:26
Top 30 Outgoing Accepted Services Sorted by KB.lundi janvier 3, 2005
80 - World Wide Web HTTP
8292 -
110 - Post Office Protocol - Version 3
8196 -
8195 -
25 - Simple Mail Transfer
443 - http protocol over TLS/SSL
8194 -
53 - Domain Name Server
8294 -
48129 -
Outgoing Accepted ServicesOutgoing Accepted Services
Warning: the graph only displays the first 20 results.
© NetReport www.net-report.net Page 31/41Report printed on lundi janvier 10, 2005 at 18:26
Service Service Comment
Top 30 Outgoing Accepted Services Sorted by KB.
Hits Hits %
lundi janvier 3, 2005
KB KB % Elapsed Time (min) Elaps. Time %
80 World Wide Web HTTP 15 068679 727 13 47367,80%78,37% 55,48%8292 353 403 1 1250,01%6,16% 4,63%110 Post Office Protocol - Version 3 1 77150 046 5977,97%5,77% 2,46%8196 636 867 2 2130,03%4,25% 9,11%8195 628 397 1 7360,03%3,27% 7,15%25 Simple Mail Transfer 10111 409 770,45%1,32% 0,32%443 http protocol over TLS/SSL 4344 033 1681,95%0,46% 0,69%8194 692 647 3900,31%0,31% 1,60%53 Domain Name Server 4 759796 4 49821,41%0,09% 18,52%8294 31 10,01%0,00% 0,00%48129 31 70,01%0,00% 0,03%
Total for the above Accepted Outgoing Services list: 22 223867 328 24 283100,00% 100,00% 100,00%
22 223 24 283Total for all Accepted Outgoing Services for the same period: 867 328
© NetReport www.net-report.net Page 32/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Accepted Services with their Top 10 Accepted Internal Users
Total HitsRule or Message NumberDestination AreaInternal User Source AreaService Comment
lundi janvier 3, 2005
80 World Wide Web HTTP
5 639External PIX-6-302013192.168.0.1143 949External PIX-6-302013192.168.0.1201 728External PIX-6-302013192.168.0.1231 437External PIX-6-302013192.168.0.112
885External PIX-6-302013192.168.0.119677External PIX-6-302013192.168.0.116392External PIX-6-302013192.168.0.108226External PIX-6-302013192.168.0.106
64External PIX-6-302013192.168.0.11837External PIX-6-302013192.168.0.110
Inside 15 043
53 Domain Name Server
4 594External PIX-6-302015192.168.0.10165External PIX-6-302013192.168.0.10
Inside 4 759
53 Domain Name Server
1 869Inside PIX-6-302015192.168.20.25032Inside PIX-6-302015192.168.20.103
Paris 1 901
110 Post Office Protocol - Version 3
533External PIX-6-302013192.168.0.108261External PIX-6-302013192.168.0.110168External PIX-6-302013192.168.0.119150External PIX-6-302013192.168.0.114139External PIX-6-302013192.168.0.106108External PIX-6-302013192.168.0.116
75External PIX-6-302013192.168.0.12367External PIX-6-302013192.168.0.11254External PIX-6-302013192.168.0.10046External PIX-6-302013192.168.0.118
Inside 1 640
© NetReport www.net-report.net Page 33/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Accepted Services with their Top 10 Accepted Internal Users
Total HitsRule or Message NumberDestination AreaInternal User Source AreaService Comment
lundi janvier 3, 2005
443 http protocol over TLS/SSL
191External PIX-6-302013192.168.0.119113External PIX-6-302013192.168.0.120
84External PIX-6-302013192.168.0.11618External PIX-6-302013192.168.0.12314External PIX-6-302013192.168.0.10811External PIX-6-302013192.168.0.114
1External PIX-6-302013192.168.0.102
Inside 432
110 Post Office Protocol - Version 3
131External PIX-6-302013192.168.20.103
Paris 131
25 Simple Mail Transfer
19External PIX-6-302013192.168.0.12318External PIX-6-302013192.168.0.11618External PIX-6-302013192.168.0.11011External PIX-6-302013192.168.0.118
5External PIX-6-302013192.168.0.1195External PIX-6-302013192.168.0.1084External PIX-6-302013192.168.0.1202External PIX-6-302013192.168.0.1122External PIX-6-302013192.168.0.1061External PIX-6-302013192.168.0.114
Inside 85
8194
47External PIX-6-302013192.168.0.10222External PIX-6-302013192.168.0.104
Inside 69
2967 SSC-AGENT
56Paris PIX-6-302015192.168.0.10
Inside 56
© NetReport www.net-report.net Page 34/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Accepted Services with their Top 10 Accepted Internal Users
Total HitsRule or Message NumberDestination AreaInternal User Source AreaService Comment
lundi janvier 3, 2005
80 World Wide Web HTTP
23External PIX-6-302013192.168.20.1033External PIX-6-302013192.168.20.250
Paris 26
© NetReport www.net-report.net Page 35/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Accepted Services with their Top 10 Accepted Visitors
Total HitsRule or Message NumberDestination AreaVisitor Source AreaService Comment
lundi janvier 3, 2005
161 SNMP
771Inside PIX-6-302015195.221.0.6/raclette.synchrotron-soleil.fr
External 771
© NetReport www.net-report.net Page 36/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Services with their Top 10 Blocked Internal Users
Total HitsRule or Message NumberDestination AreaInternal User Source AreaService Comment
lundi janvier 3, 2005
53 Domain Name Server
4 552External PIX-4-106023_ACL_PARIS192.168.20.2508External PIX-4-106023_ACL_PARIS192.168.20.103
Paris 4 560
2847 AIMPP Port Req
285External PIX-4-106023_ACL_inside192.168.0.10
Inside 285
80 World Wide Web HTTP
17External PIX-6-106015192.168.0.1148External PIX-6-106015192.168.0.1124External PIX-6-106015192.168.0.1232External PIX-6-106015192.168.0.1202External PIX-6-106015192.168.0.1161External PIX-6-106015192.168.0.108
Inside 34
8080 HTTP Alternate (see port 80)
9External PIX-4-106023_ACL_inside192.168.0.120
Inside 9
1493 netmap_lm
8Inside PIX-6-106015192.168.245.68
Sales 8
8294
6External PIX-4-106023_ACL_inside192.168.0.102
Inside 6
445 Microsoft-DS
3External PIX-4-106023_ACL_inside192.168.0.112
Inside 3
139 NETBIOS Session Service
3External PIX-4-106023_ACL_inside192.168.0.112
Inside 3
80 World Wide Web HTTP
1External PIX-6-106015192.168.20.2501External PIX-6-106015192.168.20.103
Paris 2
© NetReport www.net-report.net Page 37/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Services with their Top 10 Blocked Internal Users
Total HitsRule or Message NumberDestination AreaInternal User Source AreaService Comment
lundi janvier 3, 2005
443 http protocol over TLS/SSL
1External PIX-6-106015192.168.0.120
Inside 1
© NetReport www.net-report.net Page 38/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Services with their Top 10 Blocked Visitors
Total HitsRule or Message NumberDestination AreaVisitor Source AreaService Comment
lundi janvier 3, 2005
0 Reserved External 1 782
861Firewall PIX-3-313001142.232.8.6/cypress.bcit.ca859Firewall PIX-3-31300162.93.162.206
8Firewall PIX-3-106014194.131.13.28/mail.galliford-costainjv.co.uk7Firewall PIX-3-106014217.167.164.106/skidata.rain.fr6Firewall PIX-3-313001193.63.174.10/clown.newman.ac.uk4Firewall PIX-3-106014195.37.205.11/v-linkproof.niedersachsen.de4Firewall PIX-3-10601465.209.225.5/vod-fha.vodafone-us.com3Firewall PIX-3-10601462.160.235.105/traceroute.stops.here.cvf.fr3Firewall PIX-3-106014217.167.194.205/mail.sivea.com3Firewall PIX-3-10601480.228.114.5/msp.medien-systempartner.de
64561 External 49
49Firewall PIX-6-106015194.51.122.242/potecully.potain.fr
55641 External 43
43Firewall PIX-6-106015144.38.125.103/lc.dixie.edu
5870 External 40
40Firewall PIX-6-106015195.101.248.102/euryte.ip-france.fr
63455 External 34
34Firewall PIX-6-10601565.164.54.40/smtp.dawnfoods.com
64562 External 31
31Firewall PIX-6-106015194.51.122.242/potecully.potain.fr
60164 External 24
24Firewall PIX-6-106015213.136.31.115/kahuna.customer.bit.nl
60371 External 24
24Firewall PIX-6-106015213.136.31.115/kahuna.customer.bit.nl
© NetReport www.net-report.net Page 39/41Report printed on lundi janvier 10, 2005 at 18:26
Top 10 Blocked Services with their Top 10 Blocked Visitors
Total HitsRule or Message NumberDestination AreaVisitor Source AreaService Comment
lundi janvier 3, 2005
56916 External 23
23Firewall PIX-6-106015195.101.115.6/virtual.inforsud.com
60380 External 23
23Firewall PIX-6-106015213.136.31.115/kahuna.customer.bit.nl
© NetReport www.net-report.net Page 40/41Report printed on lundi janvier 10, 2005 at 18:26
lundi janvier 3, 2005
Top 10 Users & Visitors Using the Greatest Variety of Services
Accepted
192.168.20.103 15 314 2 9 15 323
192.168.0.102 8 67 1 6 8 73
192.168.0.116 7 896 1 2 7 898
192.168.0.104 6 29 6 29
192.168.0.10 4 4 830 1 285 5 5 115
192.168.0.108 5 945 2 2 5 947
192.168.0.112 3 1 506 3 14 5 1 520
192.168.0.120 4 4 105 3 12 5 4 117
192.168.0.123 4 1 841 1 4 4 1 845
192.168.0.114 4 5 801 1 17 4 5 818
213.136.31.115/kahuna.customer.bit.nl 283 2 421 283 2 421
208.162.171.162/natasha.hq.counterpane.com 201 258 201 258195.6.255.130/commune-chateau-thierry.rain.fr 173 499 173 499
81.80.20.66/gw.axipe.com 125 232 125 232161.44.173.71/puck.cisco.com 106 212 106 212
194.224.53.114/esiami.tsai.es 41 53 41 53212.77.168.194/mail.landratsamt-regensburg.de 41 151 41 151
82.226.58.44/arwen.prelude-ids.org 39 154 39 15482.67.126.186/saturne.interces.NET 33 49 33 49
62.58.124.114/smtp.vasco.com 27 48 27 48
Distinct Services Number of Hits
Blocked
Distinct Services Number of Hits
Total
Distinct Services Number of Hits
Accepted
Distinct Services Number of Hits
Blocked
Distinct Services Number of Hits
Total
Distinct Services Number of Hits
Internal Users
External Visitors
© NetReport www.net-report.net Page 41/41Report printed on lundi janvier 10, 2005 at 18:26