Introduction

The following tables summarize TCP/UDP port usage during the respective flow interval time. Each table summarizes a slightly different set of data and sorts the data based on different parameters. For each row in a table, a source or destination port is ranked based on the one-way direction of the flow. Ingress flows are flows coming from outside into our network. Egress flows are those leaving our network destined for external networks. Flows, octets (or 8-bit bytes if you prefer) and packets are all shown in each table. Each of these counts are based on the total number seen over the flow period. Percentages are based on qualified flows for data in it's own particular table, not all flows passing through the measured monitoring point(s).

For the previous 5 minutes starting at 2009-11-22.214500

Top 10 **TCP source ports egress by flows**
rank	srcPort	flows	octets	packets
1	80	125,734 (67.52%)	246,946,149 (23.81%)	920,721 (26.94%)
2	443	2,597 (1.39%)	19,924,634 (1.92%)	77,056 (2.25%)
3	26131	732 (0.39%)	1,954,394 (0.19%)	13,671 (0.40%)
4	9050	581 (0.31%)	1,774,956 (0.17%)	2,638 (0.08%)
5	6881	423 (0.23%)	203,049 (0.02%)	2,033 (0.06%)
6	7116	406 (0.22%)	453,602 (0.04%)	7,659 (0.22%)
7	3128	381 (0.20%)	5,114,607 (0.49%)	5,381 (0.16%)
8	20061	362 (0.19%)	491,242 (0.05%)	1,715 (0.05%)
9	19851	315 (0.17%)	228,081 (0.02%)	2,124 (0.06%)
10	25	314 (0.17%)	218,838 (0.02%)	2,672 (0.08%)

Top 10 **TCP source ports egress by octets**
rank	srcPort	flows	octets	packets
1	80	125,734 (67.52%)	246,946,149 (23.81%)	920,721 (26.94%)
2	56914	65 (0.03%)	56,388,815 (5.44%)	65,221 (1.91%)
3	53258	3 (0.00%)	40,965,918 (3.95%)	30,956 (0.91%)
4	39599	2 (0.00%)	33,193,636 (3.20%)	22,149 (0.65%)
5	38682	2 (0.00%)	33,191,148 (3.20%)	22,147 (0.65%)
6	4662	149 (0.08%)	24,728,018 (2.38%)	19,586 (0.57%)
7	36531	53 (0.03%)	21,083,231 (2.03%)	25,205 (0.74%)
8	443	2,597 (1.39%)	19,924,634 (1.92%)	77,056 (2.25%)
9	53249	1 (0.00%)	19,808,839 (1.91%)	15,333 (0.45%)
10	60378	1 (0.00%)	18,888,402 (1.82%)	14,913 (0.44%)

Top 10 **TCP source ports egress by packets**
rank	srcPort	flows	octets	packets
1	80	125,734 (67.52%)	246,946,149 (23.81%)	920,721 (26.94%)
2	50315	6 (0.00%)	7,356,452 (0.71%)	136,942 (4.01%)
3	50309	5 (0.00%)	6,779,000 (0.65%)	125,534 (3.67%)
4	50170	12 (0.01%)	18,375,014 (1.77%)	124,840 (3.65%)
5	49747	4 (0.00%)	3,731,490 (0.36%)	89,343 (2.61%)
6	443	2,597 (1.39%)	19,924,634 (1.92%)	77,056 (2.25%)
7	4278	4 (0.00%)	3,087,648 (0.30%)	76,992 (2.25%)
8	56914	65 (0.03%)	56,388,815 (5.44%)	65,221 (1.91%)
9	52871	2 (0.00%)	3,359,238 (0.32%)	64,061 (1.87%)
10	4730	3 (0.00%)	2,577,506 (0.25%)	63,164 (1.85%)

Top 10 **TCP destination ports egress by flows**
rank	dstPort	flows	octets	packets
1	80	36,099 (19.38%)	129,141,587 (12.45%)	1,281,836 (37.51%)
2	443	5,641 (3.03%)	174,837,718 (16.86%)	298,073 (8.72%)
3	5190	392 (0.21%)	359,889 (0.03%)	4,452 (0.13%)
4	11080	364 (0.20%)	212,928 (0.02%)	1,822 (0.05%)
5	8099	351 (0.19%)	121,400 (0.01%)	1,533 (0.04%)
6	2999	322 (0.17%)	131,546 (0.01%)	1,783 (0.05%)
7	1863	283 (0.15%)	840,870 (0.08%)	10,857 (0.32%)
8	25	150 (0.08%)	66,612,854 (6.42%)	45,348 (1.33%)
9	2128	136 (0.07%)	249,848 (0.02%)	3,348 (0.10%)
10	389	134 (0.07%)	55,840 (0.01%)	976 (0.03%)

Top 10 **TCP destination ports egress by octets**
rank	dstPort	flows	octets	packets
1	443	5,641 (3.03%)	174,837,718 (16.86%)	298,073 (8.72%)
2	80	36,099 (19.38%)	129,141,587 (12.45%)	1,281,836 (37.51%)
3	25	150 (0.08%)	66,612,854 (6.42%)	45,348 (1.33%)
4	14081	1 (0.00%)	40,962,919 (3.95%)	30,937 (0.91%)
5	59531	6 (0.00%)	36,245,015 (3.49%)	46,289 (1.35%)
6	3204	15 (0.01%)	31,470,929 (3.03%)	55,289 (1.62%)
7	64761	2 (0.00%)	20,700,682 (2.00%)	24,327 (0.71%)
8	21683	1 (0.00%)	19,808,839 (1.91%)	15,333 (0.45%)
9	50004	5 (0.00%)	18,356,573 (1.77%)	124,689 (3.65%)
10	50680	8 (0.00%)	16,211,223 (1.56%)	12,695 (0.37%)

Top 10 **TCP destination ports egress by packets**
rank	dstPort	flows	octets	packets
1	80	36,099 (19.38%)	129,141,587 (12.45%)	1,281,836 (37.51%)
2	443	5,641 (3.03%)	174,837,718 (16.86%)	298,073 (8.72%)
3	50004	5 (0.00%)	18,356,573 (1.77%)	124,689 (3.65%)
4	40086	2 (0.00%)	3,729,934 (0.36%)	89,330 (2.61%)
5	3204	15 (0.01%)	31,470,929 (3.03%)	55,289 (1.62%)
6	59531	6 (0.00%)	36,245,015 (3.49%)	46,289 (1.35%)
7	25	150 (0.08%)	66,612,854 (6.42%)	45,348 (1.33%)
8	14081	1 (0.00%)	40,962,919 (3.95%)	30,937 (0.91%)
9	53547	4 (0.00%)	1,593,913 (0.15%)	30,458 (0.89%)
10	64761	2 (0.00%)	20,700,682 (2.00%)	24,327 (0.71%)

Top 10 **TCP source ports ingress by flows**
rank	srcPort	flows	octets	packets
1	80	39,444 (12.56%)	3,625,947,996 (70.84%)	2,686,185 (41.21%)
2	12200	25,169 (8.01%)	1,006,916 (0.02%)	25,172 (0.39%)
3	6000	12,225 (3.89%)	507,716 (0.01%)	12,321 (0.19%)
4	500	5,851 (1.86%)	234,200 (0.00%)	5,855 (0.09%)
5	443	2,975 (0.95%)	61,182,389 (1.20%)	200,393 (3.07%)
6	11080	364 (0.12%)	180,832 (0.00%)	1,820 (0.03%)
7	8099	344 (0.11%)	139,793 (0.00%)	1,428 (0.02%)
8	81	302 (0.10%)	183,981 (0.00%)	1,508 (0.02%)
9	1863	298 (0.09%)	2,564,055 (0.05%)	10,834 (0.17%)
10	418	251 (0.08%)	10,200 (0.00%)	255 (0.00%)

Top 10 **TCP source ports ingress by octets**
rank	srcPort	flows	octets	packets
1	80	39,444 (12.56%)	3,625,947,996 (70.84%)	2,686,185 (41.21%)
2	1935	75 (0.02%)	407,924,787 (7.97%)	313,252 (4.81%)
3	40086	3 (0.00%)	218,636,232 (4.27%)	168,102 (2.58%)
4	2881	29 (0.01%)	84,256,948 (1.65%)	63,788 (0.98%)
5	443	2,975 (0.95%)	61,182,389 (1.20%)	200,393 (3.07%)
6	554	12 (0.00%)	47,461,290 (0.93%)	32,015 (0.49%)
7	2022	24 (0.01%)	45,174,520 (0.88%)	31,115 (0.48%)
8	24042	2 (0.00%)	37,551,176 (0.73%)	140,214 (2.15%)
9	30518	3 (0.00%)	26,435,033 (0.52%)	17,652 (0.27%)
10	3724	23 (0.01%)	24,876,560 (0.49%)	27,280 (0.42%)

Top 10 **TCP source ports ingress by packets**
rank	srcPort	flows	octets	packets
1	80	39,444 (12.56%)	3,625,947,996 (70.84%)	2,686,185 (41.21%)
2	1935	75 (0.02%)	407,924,787 (7.97%)	313,252 (4.81%)
3	443	2,975 (0.95%)	61,182,389 (1.20%)	200,393 (3.07%)
4	40086	3 (0.00%)	218,636,232 (4.27%)	168,102 (2.58%)
5	24042	2 (0.00%)	37,551,176 (0.73%)	140,214 (2.15%)
6	50004	7 (0.00%)	6,501,730 (0.13%)	124,911 (1.92%)
7	49840	6 (0.00%)	4,607,446 (0.09%)	107,887 (1.66%)
8	2881	29 (0.01%)	84,256,948 (1.65%)	63,788 (0.98%)
9	51046	13 (0.00%)	3,905,123 (0.08%)	52,329 (0.80%)
10	50620	6 (0.00%)	11,220,670 (0.22%)	37,978 (0.58%)

Top 10 **TCP destination ports ingress by flows**
rank	dstPort	flows	octets	packets
1	80	167,106 (53.19%)	140,993,333 (2.75%)	1,228,161 (18.84%)
2	445	26,209 (8.34%)	2,550,326 (0.05%)	51,859 (0.80%)
3	8085	16,217 (5.16%)	648,680 (0.01%)	16,217 (0.25%)
4	8080	12,036 (3.83%)	482,002 (0.01%)	12,043 (0.18%)
5	9090	7,385 (2.35%)	299,870 (0.01%)	7,464 (0.11%)
6	443	5,441 (1.73%)	14,801,540 (0.29%)	68,039 (1.04%)
7	25	4,076 (1.30%)	6,142,677 (0.12%)	37,062 (0.57%)
8	8000	1,585 (0.50%)	63,927 (0.00%)	1,596 (0.02%)
9	23	1,256 (0.40%)	87,004 (0.00%)	1,527 (0.02%)
10	26131	1,133 (0.36%)	54,981,935 (1.07%)	70,342 (1.08%)

Top 10 **TCP destination ports ingress by octets**
rank	dstPort	flows	octets	packets
1	53963	5 (0.00%)	382,544,949 (7.47%)	260,564 (4.00%)
2	50315	5 (0.00%)	353,855,774 (6.91%)	239,761 (3.68%)
3	50309	9 (0.00%)	322,708,894 (6.30%)	218,677 (3.35%)
4	62846	3 (0.00%)	290,401,458 (5.67%)	193,698 (2.97%)
5	49747	6 (0.00%)	218,639,662 (4.27%)	168,116 (2.58%)
6	49568	1 (0.00%)	201,366,167 (3.93%)	134,258 (2.06%)
7	58188	2 (0.00%)	174,916,870 (3.42%)	116,955 (1.79%)
8	4254	3 (0.00%)	161,813,389 (3.16%)	117,208 (1.80%)
9	58395	5 (0.00%)	151,517,323 (2.96%)	104,225 (1.60%)
10	4278	6 (0.00%)	150,279,232 (2.94%)	116,408 (1.79%)

Top 10 **TCP destination ports ingress by packets**
rank	dstPort	flows	octets	packets
1	80	167,106 (53.19%)	140,993,333 (2.75%)	1,228,161 (18.84%)
2	53963	5 (0.00%)	382,544,949 (7.47%)	260,564 (4.00%)
3	50315	5 (0.00%)	353,855,774 (6.91%)	239,761 (3.68%)
4	50309	9 (0.00%)	322,708,894 (6.30%)	218,677 (3.35%)
5	62846	3 (0.00%)	290,401,458 (5.67%)	193,698 (2.97%)
6	36531	85 (0.03%)	49,041,296 (0.96%)	181,878 (2.79%)
7	49747	6 (0.00%)	218,639,662 (4.27%)	168,116 (2.58%)
8	49568	1 (0.00%)	201,366,167 (3.93%)	134,258 (2.06%)
9	4730	8 (0.00%)	16,632,607 (0.32%)	125,656 (1.93%)
10	50170	8 (0.00%)	6,502,605 (0.13%)	124,930 (1.92%)

Top 10 **UDP source ports egress by flows**
rank	srcPort	flows	octets	packets
1	53	14,167 (19.15%)	1,968,413 (0.23%)	16,062 (1.18%)
2	33982	2,691 (3.64%)	460,867 (0.05%)	3,331 (0.24%)
3	49153	1,255 (1.70%)	1,460,680 (0.17%)	1,378 (0.10%)
4	56781	903 (1.22%)	129,050 (0.01%)	1,151 (0.08%)
5	16129	793 (1.07%)	178,167 (0.02%)	1,132 (0.08%)
6	3128	634 (0.86%)	673,991 (0.08%)	973 (0.07%)
7	1513	618 (0.84%)	843,597 (0.10%)	16,025 (1.17%)
8	8500	537 (0.73%)	105,990 (0.01%)	630 (0.05%)
9	51413	506 (0.68%)	154,291 (0.02%)	634 (0.05%)
10	19987	471 (0.64%)	168,088 (0.02%)	631 (0.05%)

Top 10 **UDP source ports egress by octets**
rank	srcPort	flows	octets	packets
1	16402	10 (0.01%)	221,053,269 (25.68%)	356,941 (26.13%)
2	4500	13 (0.02%)	152,411,701 (17.71%)	113,683 (8.32%)
3	61450	13 (0.02%)	139,281,767 (16.18%)	187,030 (13.69%)
4	80	96 (0.13%)	68,339,328 (7.94%)	159,355 (11.67%)
5	8247	101 (0.14%)	55,847,166 (6.49%)	57,246 (4.19%)
6	15000	123 (0.17%)	23,499,792 (2.73%)	26,889 (1.97%)
7	9110	1 (0.00%)	22,357,870 (2.60%)	27,804 (2.04%)
8	12401	114 (0.15%)	22,213,394 (2.58%)	22,551 (1.65%)
9	63528	31 (0.04%)	11,180,099 (1.30%)	11,488 (0.84%)
10	4459	18 (0.02%)	9,855,195 (1.15%)	7,652 (0.56%)

Top 10 **UDP source ports egress by packets**
rank	srcPort	flows	octets	packets
1	16402	10 (0.01%)	221,053,269 (25.68%)	356,941 (26.13%)
2	61450	13 (0.02%)	139,281,767 (16.18%)	187,030 (13.69%)
3	80	96 (0.13%)	68,339,328 (7.94%)	159,355 (11.67%)
4	4500	13 (0.02%)	152,411,701 (17.71%)	113,683 (8.32%)
5	8247	101 (0.14%)	55,847,166 (6.49%)	57,246 (4.19%)
6	17852	2 (0.00%)	4,375,974 (0.51%)	40,618 (2.97%)
7	2037	2 (0.00%)	8,341,487 (0.97%)	34,612 (2.53%)
8	9110	1 (0.00%)	22,357,870 (2.60%)	27,804 (2.04%)
9	15000	123 (0.17%)	23,499,792 (2.73%)	26,889 (1.97%)
10	12401	114 (0.15%)	22,213,394 (2.58%)	22,551 (1.65%)

Top 10 **UDP destination ports egress by flows**
rank	dstPort	flows	octets	packets
1	53	27,172 (36.73%)	2,136,635 (0.25%)	27,653 (2.02%)
2	12347	1,255 (1.70%)	1,460,680 (0.17%)	1,378 (0.10%)
3	17788	772 (1.04%)	89,176 (0.01%)	965 (0.07%)
4	8612	482 (0.65%)	21,208 (0.00%)	482 (0.04%)
5	1513	427 (0.58%)	809,476 (0.09%)	15,255 (1.12%)
6	123	358 (0.48%)	68,248 (0.01%)	898 (0.07%)
7	3128	340 (0.46%)	468,271 (0.05%)	651 (0.05%)
8	7674	259 (0.35%)	16,901 (0.00%)	259 (0.02%)
9	20129	253 (0.34%)	54,710 (0.01%)	279 (0.02%)
10	8089	247 (0.33%)	555,217 (0.06%)	1,151 (0.08%)

Top 10 **UDP destination ports egress by octets**
rank	dstPort	flows	octets	packets
1	28319	1 (0.00%)	139,279,512 (16.18%)	187,007 (13.69%)
2	4500	1 (0.00%)	138,935,904 (16.14%)	97,464 (7.14%)
3	55184	1 (0.00%)	136,471,861 (15.86%)	225,766 (16.53%)
4	9900	1 (0.00%)	74,684,776 (8.68%)	84,190 (6.16%)
5	80	61 (0.08%)	41,915,863 (4.87%)	58,135 (4.26%)
6	8247	31 (0.04%)	33,054,920 (3.84%)	34,323 (2.51%)
7	31635	2 (0.00%)	22,357,970 (2.60%)	27,805 (2.04%)
8	62784	1 (0.00%)	17,658,331 (2.05%)	12,439 (0.91%)
9	443	48 (0.06%)	17,557,447 (2.04%)	27,293 (2.00%)
10	9874	2 (0.00%)	15,995,034 (1.86%)	14,902 (1.09%)

Top 10 **UDP destination ports egress by packets**
rank	dstPort	flows	octets	packets
1	55184	1 (0.00%)	136,471,861 (15.86%)	225,766 (16.53%)
2	28319	1 (0.00%)	139,279,512 (16.18%)	187,007 (13.69%)
3	4500	1 (0.00%)	138,935,904 (16.14%)	97,464 (7.14%)
4	9900	1 (0.00%)	74,684,776 (8.68%)	84,190 (6.16%)
5	80	61 (0.08%)	41,915,863 (4.87%)	58,135 (4.26%)
6	8106	2 (0.00%)	3,565,945 (0.41%)	52,084 (3.81%)
7	16402	4 (0.01%)	9,896,312 (1.15%)	46,981 (3.44%)
8	25013	3 (0.00%)	4,376,461 (0.51%)	40,620 (2.97%)
9	7139	2 (0.00%)	8,341,535 (0.97%)	34,612 (2.53%)
10	8247	31 (0.04%)	33,054,920 (3.84%)	34,323 (2.51%)

Top 10 **UDP source ports ingress by flows**
rank	srcPort	flows	octets	packets
1	53	19,835 (21.59%)	3,312,922 (0.49%)	20,726 (1.10%)
2	3128	849 (0.92%)	804,075 (0.12%)	1,459 (0.08%)
3	20129	791 (0.86%)	74,597 (0.01%)	1,182 (0.06%)
4	2121	612 (0.67%)	68,966 (0.01%)	1,149 (0.06%)
5	23127	604 (0.66%)	118,208 (0.02%)	1,847 (0.10%)
6	7674	597 (0.65%)	46,352 (0.01%)	800 (0.04%)
7	2122	593 (0.65%)	140,488 (0.02%)	2,195 (0.12%)
8	123	543 (0.59%)	103,208 (0.02%)	1,358 (0.07%)
9	1513	452 (0.49%)	1,224,358 (0.18%)	16,019 (0.85%)
10	12347	434 (0.47%)	489,095 (0.07%)	464 (0.02%)

Top 10 **UDP source ports ingress by octets**
rank	srcPort	flows	octets	packets
1	28319	1 (0.00%)	166,100,192 (24.79%)	199,331 (10.60%)
2	9900	2 (0.00%)	97,489,367 (14.55%)	107,790 (5.73%)
3	8106	1 (0.00%)	56,459,505 (8.43%)	57,621 (3.06%)
4	16402	3 (0.00%)	27,783,789 (4.15%)	84,030 (4.47%)
5	8247	27 (0.03%)	20,959,914 (3.13%)	23,429 (1.25%)
6	56166	1 (0.00%)	18,492,396 (2.76%)	92,469 (4.92%)
7	16383	4 (0.00%)	11,834,731 (1.77%)	8,738 (0.46%)
8	55179	1 (0.00%)	11,696,437 (1.75%)	9,048 (0.48%)
9	47348	4 (0.00%)	9,539,844 (1.42%)	7,352 (0.39%)
10	15498	1 (0.00%)	9,506,192 (1.42%)	8,993 (0.48%)

Top 10 **UDP source ports ingress by packets**
rank	srcPort	flows	octets	packets
1	28319	1 (0.00%)	166,100,192 (24.79%)	199,331 (10.60%)
2	9900	2 (0.00%)	97,489,367 (14.55%)	107,790 (5.73%)
3	56166	1 (0.00%)	18,492,396 (2.76%)	92,469 (4.92%)
4	80	72 (0.08%)	8,194,711 (1.22%)	91,357 (4.86%)
5	16402	3 (0.00%)	27,783,789 (4.15%)	84,030 (4.47%)
6	21670	3 (0.00%)	8,009,399 (1.20%)	62,624 (3.33%)
7	8106	1 (0.00%)	56,459,505 (8.43%)	57,621 (3.06%)
8	4500	1 (0.00%)	7,820,192 (1.17%)	56,045 (2.98%)
9	52841	1 (0.00%)	3,202,929 (0.48%)	42,460 (2.26%)
10	3074	80 (0.09%)	5,411,397 (0.81%)	41,826 (2.22%)

Top 10 **UDP destination ports ingress by flows**
rank	dstPort	flows	octets	packets
1	53	12,559 (13.67%)	1,113,002 (0.17%)	14,786 (0.79%)
2	1434	1,566 (1.70%)	632,455 (0.09%)	1,566 (0.08%)
3	16129	1,539 (1.68%)	551,713 (0.08%)	3,131 (0.17%)
4	3128	1,534 (1.67%)	1,185,930 (0.18%)	2,318 (0.12%)
5	33982	1,218 (1.33%)	297,762 (0.04%)	1,801 (0.10%)
6	51413	1,205 (1.31%)	185,979 (0.03%)	1,440 (0.08%)
7	16842	1,178 (1.28%)	356,445 (0.05%)	1,180 (0.06%)
8	56781	994 (1.08%)	390,634 (0.06%)	1,348 (0.07%)
9	20129	987 (1.07%)	93,169 (0.01%)	1,475 (0.08%)
10	8500	849 (0.92%)	147,619 (0.02%)	1,038 (0.06%)

Top 10 **UDP destination ports ingress by octets**
rank	dstPort	flows	octets	packets
1	61450	14 (0.02%)	166,100,910 (24.79%)	199,344 (10.60%)
2	16402	4 (0.00%)	125,272,952 (18.70%)	191,820 (10.20%)
3	80	117 (0.13%)	69,602,549 (10.39%)	208,400 (11.08%)
4	8247	45 (0.05%)	30,672,611 (4.58%)	43,864 (2.33%)
5	15000	221 (0.24%)	25,930,410 (3.87%)	39,232 (2.09%)
6	10429	46 (0.05%)	23,324,854 (3.48%)	26,989 (1.43%)
7	9166	76 (0.08%)	19,798,035 (2.96%)	20,476 (1.09%)
8	12505	23 (0.03%)	18,648,086 (2.78%)	39,606 (2.11%)
9	30006	1 (0.00%)	18,492,396 (2.76%)	92,469 (4.92%)
10	10641	34 (0.04%)	15,112,964 (2.26%)	23,466 (1.25%)

Top 10 **UDP destination ports ingress by packets**
rank	dstPort	flows	octets	packets
1	80	117 (0.13%)	69,602,549 (10.39%)	208,400 (11.08%)
2	61450	14 (0.02%)	166,100,910 (24.79%)	199,344 (10.60%)
3	16402	4 (0.00%)	125,272,952 (18.70%)	191,820 (10.20%)
4	12401	111 (0.12%)	8,266,484 (1.23%)	112,948 (6.00%)
5	30006	1 (0.00%)	18,492,396 (2.76%)	92,469 (4.92%)
6	4500	10 (0.01%)	11,463,740 (1.71%)	79,171 (4.21%)
7	55914	5 (0.01%)	8,009,548 (1.20%)	62,630 (3.33%)
8	29909	327 (0.36%)	7,540,838 (1.13%)	53,131 (2.82%)
9	3688	24 (0.03%)	3,703,020 (0.55%)	48,851 (2.60%)
10	8247	45 (0.05%)	30,672,611 (4.58%)	43,864 (2.33%)

page design by jtk, 2004-07-23