Brazilian Honeypots Alliance
Distributed Honeypots Project

| Stats home | current | 1 day before | 2 days before | 3 days before | 4 days before | 5 days before | 6 days before |

Daily Statistics -- 2008-10-05

This page presents the 2008-10-05 daily statistics for the network flow data directed to honeypots from the Brazilian Honeypots Alliance. The X axis of each graphic represents a 24-hour time window, in GMT. And the Y axis represents the number of bytes or packets received by the honeypots, in logarithmic scale. You can see some observations at the bottom of this page.

| TCP Ports/Bytes | TCP Ports/Packets | UDP Ports/Bytes | UDP Ports/Packets | CC/Bytes | CC/Packets |
| Win Source OS/Bytes | Win Source OS/Packets | Non-Win Source OS/Bytes | Non-Win Source OS/Packets |

Top Destination TCP Ports -- Bytes/s
(click to view the graphic divided into 4-hour periods)

[Destination TCP Ports (bytes/s)]
top

Top Destination TCP Ports -- Packets/s
(click to view the graphic divided into 4-hour periods)

[Destination TCP Ports (pkts/s)]
top

Top Destination UDP Ports -- Bytes/s
(click to view the graphic divided into 4-hour periods)

[Destination UDP Ports (bytes/s)]
top

Top Destination UDP Ports -- Packets/s
(click to view the graphic divided into 4-hour periods)

[Destination UDP Ports (pkts/s)]
top

Top Source Country Codes (CC) -- Bytes/s
(click to view the graphic divided into 4-hour periods)

[CC (bytes/s)]
top

Top Source Country Codes (CC) -- Packets/s
(click to view the graphic divided into 4-hour periods)

[CC (pkts/s)]
top

Top Windows Source OS -- Bytes/s
(click to view the graphic divided into 4-hour periods)

[Windows Source OS (bytes/s)]
top

Top Windows Source OS -- Packets/s
(click to view the graphic divided into 4-hour periods)

[Windows Source OS (pkts/s)]
top

Top Non-Windows Source OS -- Bytes/s
(click to view the graphic divided into 4-hour periods)

[Non-Windows Source OS (bytes/s)]
top

Top Non-Windows Source OS -- Packets/s
(click to view the graphic divided into 4-hour periods)

[Non-Windows Source OS (pkts/s)]
top

| Stats home | current | 1 day before | 2 days before | 3 days before | 4 days before | 5 days before | 6 days before |

Observations:

  1. Each image above contains a STACK AREA graphic, which means that each data set of the graphic is stacked on top of the previous one.

  2. Be careful while analysing and comparing the colored areas, because the Y axis is represented in logarithmic scale. The bigger area does not always stand for the larger amount of packets or bytes.

  3. A list of known TCP/UDP ports and associated service names can be found at IANA.

  4. A list of known Country Codes can be found at IANA. The country code "XX" stands for network flows that could not be associated with any country code, for example, flows from private networks.

  5. Source operating system guessing is performed by passive fingerprinting. A list of operating systems can be found at the OpenBSD Project CVS Repository.

  6. If you see a letter following the numbers at the botton of a graphic, it will stand for:
n - 10e-9 (nano)     u - 10e-6 (micro)     m - 10e-3 (mili)
k - 10e+3 (kilo)     M - 10e+6 (mega)     G - 10e+9 (giga)

[ORCA] [RRDtool]

| Brazilian Honeypots Alliance | Honeynet.BR Project |

Valid XHTML 1.0! Valid CSS! Honeynet.BR Project
2008-10-05