(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about a.root-servers.net

IP Address0.0.0.0 Flag for gTLD code net (Guessing from gTLD) [unicast - multihomed Multihomed] [ Purge Asset ]
Multihomed Addresses 
    First/Last SeenTue Jun 10 20:59:23 2025  -  Wed Jul 2 10:22:34 2025 [Inactive since 3 sec]
    Domainroot-servers.net
    Main Host MAC AddressE0:CB:19:60:8F:70 
    VLAN Id10
    Host LocationLocal (inside specified/local subnet)
    IP TTL (Time to Live)1:250 [~0 hop(s)]
    Total Data Sent953.1 MBytes/2,050,574 Pkts/0 Retran. Pkts [0%]
    Broadcast Pkts Sent0 Pkts
    Routed Traffic67.3 KBytes/1,013 Pkts
    Data Sent Stats
    0 %
     
    		Rem 100 %
    IP vs. Non-IP Sent
    0 %
     
    		Non-IP 100 %
    Total Data Rcvd342.6 MBytes/1,555,794 Pkts/0 Retran. Pkts [0%]
    Data Rcvd Stats
    Local 23.4 %
      
    		Rem 76.6 %
    IP vs. Non-IP Rcvd
    0 %
     
    		Non-IP 100 %
    Sent vs. Rcvd Pkts
    Sent 56.9 %
      
    		Rcvd 43.1 %
    Sent vs. Rcvd Data
    Sent 73.6 %
      
    		Rcvd 26.4 %
    Host TypeName Server DNS
    NTP Server NTP Server
    Gateway/Router Router
    VoIP Host VoIP
    HTTP Server HTTP Server
    Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
    1. Medium RiskUnexpected packets (e.g. traffic to closed port or connection reset):
      [Sent: overlapfrag] 
    2. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
      [Rcvd: rst] [Sent: closed-empty] [Rcvd: port unreac] [Rcvd: hostnet unreac] 

     

    Host Traffic Stats

    TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
    10 AM 364.0 KBytes1.1 %160.2 KBytes1.1 %
    9 AM 1.2 MBytes3.6 %1015.3 KBytes7.0 %
    8 AM 1.1 MBytes3.3 %453.0 KBytes3.1 %
    7 AM 1.2 MBytes3.5 %474.7 KBytes3.3 %
    6 AM 1.1 MBytes3.3 %470.5 KBytes3.2 %
    5 AM 1.2 MBytes3.6 %534.8 KBytes3.7 %
    4 AM 1.1 MBytes3.3 %494.3 KBytes3.4 %
    3 AM 1.2 MBytes3.6 %538.3 KBytes3.7 %
    2 AM 1.1 MBytes3.3 %451.0 KBytes3.1 %
    1 AM 3.6 MBytes10.6 %1.2 MBytes8.5 %
    12 AM 1.4 MBytes4.2 %534.8 KBytes3.7 %
    11 PM 1.5 MBytes4.4 %594.6 KBytes4.1 %
    10 PM 1.4 MBytes4.2 %533.8 KBytes3.7 %
    9 PM 1.4 MBytes4.3 %567.7 KBytes3.9 %
    8 PM 1.6 MBytes4.7 %740.2 KBytes5.1 %
    7 PM 1.5 MBytes4.4 %573.6 KBytes4.0 %
    6 PM 1.4 MBytes4.1 %540.5 KBytes3.7 %
    5 PM 1.5 MBytes4.5 %1.1 MBytes8.0 %
    4 PM 1.4 MBytes4.1 %537.3 KBytes3.7 %
    3 PM 1.5 MBytes4.5 %586.8 KBytes4.0 %
    2 PM 1.4 MBytes4.2 %552.1 KBytes3.8 %
    1 PM 1.6 MBytes4.6 %593.8 KBytes4.1 %
    12 PM 1.4 MBytes4.2 %576.4 KBytes4.0 %
    11 AM 1.5 MBytes4.4 %579.5 KBytes4.0 %
    Total

     

    Packet Statistics

    TCP ConnectionsDirected toRcvd From
    Attempted12,669 24,889
    Established194 [2 %] 12,447 [50 %]
    Terminated12,325 0 

    TCP FlagsPkts SentPkts Rcvd
    SYN12,669 24,889
    RST|ACK8 3,542
    RST417 29
    NULL197 0 

    AnomalyPkts Sent toPkts Rcvd from
    TCP Pkt Disgnostic Port8 0 
    ICMP Fragments0  4
    Overlapping Fragments5 0 
    Closed Empty TCP Conn.12,325 0 
    ICMP Port Unreachable88 163
    ICMP Net Unreachable15 15
    ICMP Administratively Prohibited2 0 

    ARPPacket
    Request Sent1,029
    Reply Rcvd1,029 (100.0 %)
    Reply Sent0

     

    Protocol Distribution

    ProtocolData SentData Rcvd
    TCP945.9 MBytes
    49%

     

    		 256.9 MBytes
    48%

     

    UDP3.8 MBytes  3.0 MBytes 
    ICMPv62.6 MBytes  2.6 MBytes 
    IPv6952.4 MBytes
    49%

     

    		 262.5 MBytes
    49%

     

    (R)ARP42.2 KBytes  340.2 KBytes 
    Other (Non IP)20.9 KBytes  0.0 KBytes 
    Protocol Distribution
    IP Distribution

     

    Unknown Protocols

    Data SentData Rcvd
  1. IP Protocol: 0x41
  2. IP Protocol: 0x47
  3. IP Protocol: 0x4  
    		4.  

     

    ICMP Traffic

    TypePkt SentPkt Rcvd
    Unreach226
    Source Quench664

     

    Last Contacted Peers

    Sent ToIP Address
    0.0.0.0 (vlan 10) :: 
    Total Contacts2
    Received FromIP Address
    0.0.0.0 (vlan 10) :: 
    3.47.255.123.static.snap.net.nz (vlan 10) 123.255.47.3 
    Total Contacts3

     

    IP Service Stats: Client Role

     # Loc. Req. Sent# Rem. Req. Sent# Pos. Reply Rcvd# Neg. Reply RcvdLocal RndTripRem RndTrip
    DNS00.0%86100.0%00.0%00.0%0.0 ms - 0.0 ms0.0 ms - 0.0 ms

     

    IP Service Stats: Server Role

     # Loc. Req. Rcvd# Rem. Req. Rcvd# Pos. Reply Sent# Neg. Reply SentLocal RndTripRem RndTrip
    DNS00.0%18,077100.0%15,88399.0%450.0%0.0 ms - 0.0 ms6.5 ms - 420.3 ms

     

    TCP/UDP Service/Port Usage

    IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
    ssh22333/112.7 KBytes0.0.0.0 (vlan 10)   
    domain5386/3.2 KBytes0.0.0.0 (vlan 10) 34012/2.8 MBytes0.0.0.0 (vlan 10)
    tftp692/400.0.0.0 (vlan 10)   
    www80  74/75.7 KBytes0.0.0.0 (vlan 10)
    kerberos882/2080.0.0.0 (vlan 10)   
    sunrpc1117/2800.0.0.0 (vlan 10)   
    ntp12316224/758.1 KBytes0.0.0.0 (vlan 10) 16150/757.0 KBytes0.0.0.0 (vlan 10)
    netbios-ns1373/1500.0.0.0 (vlan 10)   
    snmp16195/4.1 KBytes0.0.0.0 (vlan 10)   
    xdmcp1772/140.0.0.0 (vlan 10)   
    4274272/940.0.0.0 (vlan 10)   
    https443930/229.5 KBytes0.0.0.0 (vlan 10) 23931/970.9 MBytes0.0.0.0 (vlan 10)
    isakmp50082/19.8 KBytes0.0.0.0 (vlan 10)   
    5235232/400.0.0.0 (vlan 10)   

     

    TCP/UDP - Traffic on Other Ports

    Client PortServer Port

     

    TCP/UDP Recently Used Ports

    Client PortServer Port

     

    4 Active TCP/UDP Sessions

    ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
    3.47.255.123.static.snap.net.nz (vlan 10)  VoIP Printer Mail (SMTP) HTTP Server NTP Server Medium Risk :55041a.root-servers.net (vlan 10)  Multihomed Router VoIP3232Wed Jul 2 10:14:41 2025Wed Jul 2 10:14:41 20250 sec7:56   ACK 
    3.47.255.123.static.snap.net.nz (vlan 10)  VoIP Printer Mail (SMTP) HTTP Server NTP Server Medium Risk :56125a.root-servers.net (vlan 10)  Multihomed Router VoIP18.8 KBytes97.9 KBytesWed Jul 2 10:14:41 2025Wed Jul 2 10:22:15 20257:3422 sec   SYN ACK PUSH 
    3.47.255.123.static.snap.net.nz (vlan 10)  VoIP Printer Mail (SMTP) HTTP Server NTP Server Medium Risk :58528a.root-servers.net (vlan 10)  Multihomed Router VoIP3.2 KBytes2.6 KBytesWed Jul 2 10:19:16 2025Wed Jul 2 10:19:16 20250 sec3:21   SYN ACK PUSH 

    The color of the host link indicates how recently the host was FIRST seen
      0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
    Report created on Wed Jul 2 10:22:37 2025 [ntop uptime: 21 days 13:25:54]
    Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
    © 1998-2007 by Luca Deri, built: Dec 21 2009 22:55:52.
    Listening on [eth0,NetFlow-device.2] for all packets (i.e. without a filtering expression)
    Web reports include only interface "eth0"