Raptor Eagle Firewall Usage Report

Produced Dec 10 , 2000

Logfile report for filename     logfile.acc

Time Span 0:00:00 to 24:00:00


Total Connections Reported Thru Firewall : 1155
Total Bytes Thru Firewall : Sent = 491459     Recieved = 5510947     Combined = 6002406


Totals Connections per Protocol Selected
Secure WebWeb TrafficPOP3 ServerRemote PrintFTP DataFTP CommInternet MailTelnet
58    
5 %		289    
25 %		263    
22 %		492    
42 %		13    
1 %		10    
0 %		3    
0 %		27    
2 %


Totals Bytes per Protocol Selected
Secure WebWeb TrafficPOP3 ServerRemote PrintFTP DataFTP CommInternet MailTelnet
394472    
6 %		678237    
11 %		167799    
2 %		212904    
3 %		4125610    
68 %		9688    
0 %		4492    
0 %		409204    
6 %


Hourly Usage of All Protocols
Hour Connections
00        
01        
02        
03        
04        
05        
06        
07        
08  24    ***  
09  45    *******  
10  107    *****************  
11  58    *********  
12  224    ************************************  
13  300    ************************************************  
14  370    ************************************************************  
15  27    ****  
16        
17        
18        
19        
20        
21        
22        
23        


Secure Web - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
www.firstunion.com 58   394472   79442   315030  


Secure Web - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
pxl 58   394472   79442   315030  


Web Traffic - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
209.4.7.131 249   493080   127761   365319  
www0.fedex.com 10   105407   3689   101718  
163.125.35.101 4   32232   1367   30865  
www.firstunion.com 12   19328   4663   14665  
intranetsql_p 7   17980   2810   15170  
www.accudata-america.com 7   10210   2923   7287  


Web Traffic - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
lmw 162   278841   85891   192950  
mhm 52   112135   26183   85952  
mpm 14   111553   5325   106228  
pal 23   95799   10303   85496  
lag 12   32391   5115   27276  
pxl 16   27385   6334   21051  
intranetsql_p 10   20133   4062   16071  


POP3 Server - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
209.4.7.131 263   167799   14874   152925  


POP3 Server - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
bob 91   43724   5009   38715  
lag 78   39816   4256   35560  
rjs 74   38107   4086   34021  
ycs 6   23016   522   22494  
lmw 10   12649   682   11967  
hap 3   10262   291   9971  
10.0.0.217 1   225   28   197  


Remote Print - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
10.0.0.152 492   212904   212728   176  


Remote Print - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
135.111.40.21 487   212795   212673   122  
209.4.7.132 5   109   55   54  


FTP Data - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
163.125.35.4 2   3938873   0   3938873  
207.103.86.129 11   186737   0   186737  


FTP Data - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
10.0.0.251 2   3938873   0   3938873  
10.0.0.244 11   186737   0   186737  


FTP Comm - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
ftp.ccgroupnet.com 8   6391   703   5688  
jerry.allworld.com 2   3297   169   3128  


FTP Comm - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
pxl 8   6391   703   5688  
pal 2   3297   169   3128  


Internet Mail - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
209.4.7.131 3   4492   3109   1383  


Internet Mail - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
lag 2   3230   2308   922  
bob 1   1262   801   461  


Telnet - External Destinations Requested
Destination Number of Times Requested Total Bytes Total Sent Total Recieved
204.107.111.20 27   409204   37221   371983  


Telnet - Connections by Clients Requested
Source Number Requests Made Total Bytes Total Sent Total Recieved
klg 9   154460   10929   143531  
tps 3   53608   6020   47588  
kja 3   53481   4888   48593  
hsk 4   51705   7507   44198  
jja 5   39728   4121   35607  
hkp 1   26530   1867   24663  
hap 1   19369   1131   18238  
pas 1   10323   758   9565  


Logfile Codes Recorded
Code Times Recorded Description
101   1   Eagle Network Security Management System version starting up.  
104   9   re-read of new config file successful  
106   6   to trace: host1 - ... - hostn  
108   1   starting new log file  
109   9   re-reading service configuration file  
117   5   Daemon starting  
120   14   infomessage: log various informational messages,ex:license status  
121   1215   statistics: duration=(seconds) user=(user) auth=(auth type)  
122   10   infomessage: daemon listening on port(s), usually at startup  
201   299   service[id]: access denied for incoming to outgoing  
219   5   cant parse url (first line of http request)  
226   487   IP packet dropped by the firewall, refer to log for REASON  
228   165   protocol: cant connect to DST port PORTNUM (proxy connection failed)  
310   1   WA-name ipaddr: can't verify reverse address  
347   2    
501   187   AL-access from incoming to outgoing (rule): period  
503   528   AL-host ipaddr1: reverse address ipaddr2 doesn't match  
516   127   AL-Asked about .... for .... -- server .... sent .....  

Report provided by www.NetSecAdmin.com
For more information or customization,
contact Bobby Brown e-mail: bbrown@netsecadmin.com