Communications

Now that we have a rough idea of how the topology looks, we can try to further break down the communications. Figure 2.4 shows the outbound connections. We see that only ten machines are showing up. These are the number of destination that these machines are connecting to^2.6:

IP              Count          IP              Count
207.166.87.157  6760           207.166.87.40   31
32.245.166.236  2972           32.245.166.119  31
138.97.18.88    2539           138.97.18.225   12
115.74.249.65   358            115.74.249.202  6
170.129.50.120  332            170.129.50.3    2

Figure 2.4: Outbound connections.

Figure 2.5 shows the inbound connections. After generating the first version of the graph, it became apparent that there are too many IP addresses to be displayed:

• Number of destination IPs:^2.7 83634
• Number of destination IPs aggregated in C classes:^2.8 1208
• Number of destination IPs aggregated in B classes:^2.9 5

These numbers also suggest that there are five class B networks protected by this device.

Figure 2.5: Inbound connections.