Some of you may find it interesting to do a quick scan of the enclosed PDF log file. It's a 3 day SYSLOG from the syslog server inside my CradlePoint MBR900 WiFi/router. I told the router to save as .txt, then I converted it to PDF and uploaded it.
At some places of note, I edited in ">>>NOTE"
Such as when WiFi clients associate, etc.
At home, and moreso in a project at work, I've spent time looking at these logs, where there are connection attempts repeating from the same IP address and some few port numbers. Many/most are from IP addresses I'm told relate to domains in China. And many of the port numbers are reputed to be those used by virus propagators.
For some of the worst attackers, I used the router's "black list" to reject all packets from certain IP addresses. The log entries "Blocked ..." are for incoming packets on ports that aren't forwarded in my router config, OR! for IP addresses or address ranges (domains) that are blacklisted.
(For privacy, I changed to xxx.yyy those entries showing my public IP address, not that it matters that much. And my domain name in dyndns updates).
Cool.
I think the poster wants every connection made, every website and net service that had a transaction. The origin IP / port, destination IP / port, and probably destination name.
I park one of my browser tabs on NYTimes's home page, there are about at least 20-30 transactions, if not more just on that page. It auto reloads every 3 minutes, that 20 thousand transactions per day, for one tab of my browser. Now add to that igoogle, hotmail, gmail, BBC, aim, yahoo, twitter that auto reload. That combined with my manually loading of pages, and four other machines (not including an XBox, Tivo, andriod phones and other autochecks done ) - I would guess I hit at least three quarters to more than a million connections opened every day (heavy web user, work from home ).
So, lets say, 1.5 million transactions per day, now double that to account for the network logging of each of those, plus all of the scans, FTP and net noise I have, and we are talking a large number of transactions flooding my network. And that is not running utorrent or other network clients, which are not uncommon for folks.
The logging doubles my local net traffic.
( I'm sorry, no intent to dis cradlepoint, was just trying to be funny )