[wellylug] NTop...

Chris Hodgetts chris at archnetnz.com
Sat May 22 21:10:38 NZST 2004


This is the type of traffic / info I was referring to

kirsty.paradise.net.nz  DNSFlag for (ISO 3166 code) nz (from p2c
file)203.96.152.12  10%    1212 sec 216.39.69.70 Flag for (ISO 3166
code) us (from p2c file)216.39.69.70  10%    2316 sec ads.web.aol.com
Flag for (ISO 3166 code) us (from p2c file)64.12.174.185  2%    3416 sec
202.20.0.86 Flag for (ISO 3166 code) nz (from p2c file)202.20.0.86  2% 
3415 sec 172.17.16.1  172.17.16.1  2%    010 sec 00:03:93:CB:4A:F4
00:03:93:CB:4A:F4 2%    10 sec lns-p19-16-82-65-153-209.adsl.proxad.net
Flag for (ISO 3166 code) eu (from p2c file)82.65.153.209  2%    1832 sec
00:48:54:56:72:9F   00:48:54:56:72:9F     00 sec
203-79-105-254.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)203.79.105.254      00 sec Netgear, Inc.    00:09:5B:A7:61:B1  
Netgear, Inc. 03 sec 202-0-62-246.cable.paradise.net.nz Flag for (ISO
3166 code) nz (from p2c file)202.0.62.246      03 sec 00:80:AD:AE:09:71
00:80:AD:AE:09:71     00 sec 203-79-105-156.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)203.79.105.156      00 sec BELKIN
COMPONENTS    00:30:BD:C3:87:C5   BELKIN COMPONENTS 012 sec
203-79-67-74.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)203.79.67.74      012 sec 00:0D:56:50:D5:D4   00:0D:56:50:D5:D4  
011 sec 218-101-49-100.cable.paradise.net.nz Flag for (ISO 3166 code) nz
(from p2c file)218.101.49.100      011 sec 3COM CORPORATION 
00:10:5A:82:7E:FC   3COM CORPORATION 013 sec
202-0-62-61.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.62.61      013 sec BELKIN COMPONENTS    00:30:BD:C2:73:5B  
BELKIN COMPONENTS 012 sec 202-0-62-42.cable.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)202.0.62.42      012 sec
fe7-4-1025-8.bertha.paradise.net.nz Flag for (ISO 3166 code) nz (from
p2c file)218.101.48.1      010 sec 00:0F:9F:28:6D:79
00:0F:9F:28:6D:79     00 sec 203-79-96-77.paradise.net.nz Flag for (ISO
3166 code) nz (from p2c file)203.79.96.77      00 sec
fe7-4-1025-11.bertha.paradise.net.nz Flag for (ISO 3166 code) nz (from
p2c file)203.79.104.1      00 sec 00:05:1C:19:5F:2C
00:05:1C:19:5F:2C     012 sec 218-101-49-162.cable.paradise.net.nz Flag
for (ISO 3166 code) nz (from p2c file)218.101.49.162      012 sec IPv6 
33:33:00:00:00:FB   Multicast 10 sec 00:0C:E5:1E:0B:B7
00:0C:E5:1E:0B:B7     00 sec 218-101-48-18.cable.paradise.net.nz Flag
for (ISO 3166 code) nz (from p2c file)218.101.48.18      00 sec
00:0B:06:B5:00:3F   00:0B:06:B5:00:3F     05 sec
202-0-54-28.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.54.28      05 sec 00:E0:4C:77:50:19   00:E0:4C:77:50:19  
011 sec www.ban-sanrak.com Flag for (ISO 3166 code) th (from p2c
file)203.78.104.84      011 sec D-LINK    00:50:BA:BD:EE:36   D-LINK 00
sec klingon.dts.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.36.204.130      00 sec AboCom Systems, Inc. 
00:E0:98:AE:DA:A3   AboCom Systems, Inc. 00 sec
203-79-96-34.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)203.79.96.34      00 sec 00:50:18:14:BE:75   00:50:18:14:BE:75  
00 sec 203-79-116-79.cable.paradise.net.nz Flag for (ISO 3166 code) nz
(from p2c file)203.79.116.79      00 sec 00:0D:61:63:A4:FF
00:0D:61:63:A4:FF     03 sec 203-79-96-58.paradise.net.nz Flag for (ISO
3166 code) nz (from p2c file)203.79.96.58      03 sec D-LINK SYSTEMS,
INC.    00:80:C8:70:18:06   D-LINK SYSTEMS, INC. 00 sec
202-0-53-211.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.53.211      00 sec gen2.ihug.co.nz Flag for (ISO 3166 code)
nz (from p2c file)203.109.252.7      920 sec 00:30:65:37:61:04
00:30:65:37:61:04     00 sec 203-79-96-46.paradise.net.nz Flag for (ISO
3166 code) nz (from p2c file)203.79.96.46      00 sec 00:02:44:79:88:68
00:02:44:79:88:68     00 sec 203-79-115-179.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)203.79.115.179      00 sec The Linksys
Group, Inc.    00:06:25:5D:19:42   The Linksys Group, Inc. 00 sec
202-0-53-23.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.53.23      00 sec 00:30:F1:17:29:93   00:30:F1:17:29:93  
00 sec 202-0-54-35.cable.paradise.net.nz Flag for (ISO 3166 code) nz
(from p2c file)202.0.54.35      00 sec Netgear, Inc. 
00:09:5B:18:5F:3D   Netgear, Inc. 00 sec
203-79-110-38.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from
p2c file)203.79.110.38      00 sec 00:02:44:38:17:9B
00:02:44:38:17:9B     00 sec 203-79-67-72.cable.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)203.79.67.72      00 sec
00:90:7F:11:5F:D5   00:90:7F:11:5F:D5     00 sec smtp.displaypoint.co.nz
Flag for (ISO 3166 code) nz (from p2c file)203.79.116.152      00 sec
ANI COMMUNICATIONS INC.    00:40:05:D2:D1:13   ANI COMMUNICATIONS
INC. 00 sec 202-0-54-49.cable.paradise.net.nz Flag for (ISO 3166 code)
nz (from p2c file)202.0.54.49      00 sec 00:00:94:C6:83:91
00:00:94:C6:83:91     00 sec 202-0-52-73.cable.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)202.0.52.73      00 sec
00:90:4B:0B:13:15   00:90:4B:0B:13:15     00 sec
202-0-52-192.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.52.192      00 sec 00:0F:3D:10:0D:AE   00:0F:3D:10:0D:AE  
00 sec 203-79-96-55.paradise.net.nz Flag for (ISO 3166 code) nz (from
p2c file)203.79.96.55      00 sec ANI COMMUNICATIONS INC. 
00:40:05:D2:ED:45   ANI COMMUNICATIONS INC. 03 sec
203-79-119-108.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from
p2c file)203.79.119.108      03 sec 00:0D:88:03:24:47
00:0D:88:03:24:47     00 sec 203-79-104-140.cable.paradise.net.nz Flag
for (ISO 3166 code) nz (from p2c file)203.79.104.140      00 sec
Netgear, Inc.    00:09:5B:3B:30:C8   Netgear, Inc. 00 sec
202-0-54-247.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.54.247      00 sec 00:90:1A:40:03:C3   00:90:1A:40:03:C3  
03 sec telstraclear-docsis-gateway.xtreme.net.nz Flag for (ISO 3166
code) nz (from p2c file)203.167.235.1      00 sec 00:0D:87:40:4B:D3
00:0D:87:40:4B:D3     00 sec 203-79-104-200.cable.paradise.net.nz Flag
for (ISO 3166 code) nz (from p2c file)203.79.104.200      00 sec
00:02:44:79:03:3F   00:02:44:79:03:3F     00 sec
202-0-41-179.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.41.179      00 sec 00:30:84:3C:17:9B   00:30:84:3C:17:9B  
00 sec 203-79-105-36.paradise.net.nz Flag for (ISO 3166 code) nz (from
p2c file)203.79.105.36      00 sec 00:08:0E:82:7D:4B
00:08:0E:82:7D:4B     00 sec 202-0-62-46.cable.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)202.0.62.46      00 sec ANI
COMMUNICATIONS INC.    00:40:05:DA:DB:C7   ANI COMMUNICATIONS INC. 00
sec gw.cable2.linuxnet.co.nz Flag for (ISO 3166 code) nz (from p2c
file)202.49.249.97      00 sec 203-79-105-231.paradise.net.nz Flag for
(ISO 3166 code) nz (from p2c file)203.79.105.231      00 sec
00:B0:8E:42:77:86  Router  00:B0:8E:42:77:86     016 sec
00:0C:E5:1E:05:83   00:0C:E5:1E:05:83     00 sec
202-0-53-234.cable.paradise.net.nz Flag for (ISO 3166 code) nz (from p2c
file)202.0.53.234      00 sec 00:40:2B:27:92:C0   00:40:2B:27:92:C0  
016 sec 218-101-48-150.cable.paradise.net.nz Flag for (ISO 3166 code) nz
(from p2c file)218.101.48.150      016 sec 00:05:32:CF:28:C1
00:05:32:CF:28:C1     015 sec 172.17.0.1  172.17.0.1   


And in about 1 minute I get about 16 / 20 pages of this type of
information.

The firewall , "Should" stop everything incomming except for like the
standard services that one would run, 

Just a little puzzled..


On Sat, 2004-05-22 at 21:02, Andrej Ricnik wrote:
> On Sat, 22 May 2004 20:49, Chris Hodgetts wrote:
> >  Hello,
> 
> >  Does ntop actually send data, apart from DNS look ups, or
> > does it just sit an listern and read the data coming into the
> > interface... If that makes any sense at all.
> It sits ... and only does DNS lookups if you
> let it, if you're happy with IP's it won't 
> create any traffic ...
> 
> 
> >  Why I am asking, is that when I had both eth0 and eth1 being
> > monitored, I was seeing things like Belkin and ANI
> > Comunications INC, AboCom Systems, Inc.  and things in the
> > Host Information on the stats page.
> 
> >  could anyone shed any light on these :) - or is it OK to see
> > this data?
> Depends on what type & port they're on, and how
> your firewall is set-up ;)
> 
> -- 
> 63,000 bugs in the code, 63,000 bugs, 
> ya get 1 whacked with a service pack, 
> now there's 63,005 bugs in the code!!
-- 




More information about the wellylug mailing list