Rut Row - bad mojo Scooby!	(C) 1998-2005 - Luca Deri

Packets	Dropped (libpcap) 0.0% 113,261 Dropped (ntop) 0.0% 0 Total Received (ntop) 323,049,404 Total Packets Processed 323,049,404 Unicast 99.9% 322,833,212 Broadcast 0.1% 216,192 Multicast 0.0% 0 Shortest 42 bytes Average Size 305 bytes Longest 8,231 bytes <= 64 bytes 35.8% 115,678,083 64 to 128 bytes 29.2% 94,175,404 129 to 256 bytes 0.7% 2,202,875 257 to 512 bytes 2.8% 9,007,008 513 to 1024 bytes 5.5% 17,906,227 1025 to 1518 bytes 17.6% 56,786,509 > 1518 bytes 8.4% 27,293,298 Packets too long [> 1514] 8.4% 27,293,319 Bad Packets (Checksum) 0.0% 0
Traffic	Total 212.9 GB [323,049,404 Pkts] IP Traffic 143.7 GB [143.7 GB Pkts] Fragmented IP Traffic 0 [0.0%] Non IP Traffic 69.2 GB Average TTL 66 TTL <= 32 0.1% 281,252 32 < TTL <= 64 71.3% 230,439,245 64 < TTL <= 96 0.0% 82,566 96 < TTL <= 128 28.1% 90,663,979 128 < TTL <= 160 0.0% 2,947 160 < TTL <= 192 0.0% 83,812 192 < TTL <= 224 0.0% 7,805 224 < TTL <= 256 0.4% 1,410,072
Remote Hosts Distance
Network Load	Actual 478.4 Kbps 103.6 Pkts/sec Last Minute 1.0 Mbps 186.4 Pkts/sec Last 5 Minutes 1.2 Mbps 199.1 Pkts/sec Peak 5.8 Mbps 1264.7 Pkts/sec Average 1.3 Mbps 246.8 Pkts/sec
Historical Data	[ ]

Protocol	Data	Percentage
IP	143.7 GB	67.5%	TCP 143.4 GB 99.8% UDP 280.9 MB 0%   ICMP 11.2 MB 0%   Other IP 8.2 KB 0%
(R)ARP	2.7 MB	0%

TCP/UDP Protocol	Data	Flows	Accumulated Percentage / Historical Protocol View
FTP	6.4 KB	15	0%
PROXY	5.9 KB	18	0%
HTTP	143.4 GB	16,389,612	99.8%
DNS	278.5 MB	1,995,061	0%
Telnet	2.5 KB	21	0%
NBios-IP	276.3 KB	2,752	0%
Mail	2.2 MB	8,784	0%
X11	37.6 KB	350	0%
SSH	63.0 MB	16,953	0%
Gnutella	0.1 KB	2	0%
eDonkey	0.4 KB	2	0%
Other TCP/UDP-based Protocols	13.6 MB	16,430,516	0%
Accumulated View
Historical View
Note: What is a flow? TCP: a flows is a TCP connection. UDP: a flow is a packet. TCP flows are not accounted for fully (sender and recipient) remote peers.

 

TCP/UDP Traffic Port Distribution:
Last Minute View

TCP/UDP Port		Total	Sent	Rcvd
www	80	809.2 KB	677.7 KB	131.5 KB
55356	55356	66.9 KB	4.3 KB	62.6 KB
51958	51958	51.8 KB	3.0 KB	48.8 KB
51983	51983	43.0 KB	1.8 KB	41.3 KB
53337	53337	33.5 KB	3.6 KB	29.9 KB
22406	22406	27.1 KB	999	26.1 KB
50807	50807	25.5 KB	1.6 KB	23.9 KB
50809	50809	25.1 KB	1.7 KB	23.4 KB
50808	50808	21.5 KB	1.9 KB	19.6 KB
5725	5725	17.5 KB	1016	16.5 KB
55321	55321	16.9 KB	1.7 KB	15.2 KB
55307	55307	14.8 KB	1.6 KB	13.2 KB
55341	55341	14.1 KB	1.6 KB	12.5 KB
51435	51435	13.3 KB	1.6 KB	11.7 KB
34846	34846	12.8 KB	995	11.9 KB
55322	55322	12.5 KB	1.4 KB	11.1 KB
51974	51974	11.7 KB	1.1 KB	10.6 KB
64489	64489	11.0 KB	1.1 KB	9.9 KB
60670	60670	10.6 KB	1.3 KB	9.3 KB
50810	50810	10.2 KB	1.2 KB	9.0 KB
50811	50811	10.2 KB	1.2 KB	9.0 KB
34607	34607	9.7 KB	919	8.8 KB
34205	34205	9.6 KB	704	8.9 KB
55318	55318	9.5 KB	1.2 KB	8.2 KB
51966	51966	8.6 KB	1.0 KB	7.6 KB
55360	55360	8.1 KB	1.2 KB	6.8 KB
33462	33462	7.7 KB	1.1 KB	6.6 KB
5453	5453	7.6 KB	862	6.8 KB
63547	63547	7.5 KB	966	6.5 KB
55344	55344	7.3 KB	1.3 KB	6.1 KB
3831	3831	7.2 KB	736	6.5 KB
55357	55357	7.2 KB	1.3 KB	5.9 KB
Notes: sum(total traffic per port) = 2*(total IP traffic) because the traffic per port is counted twice (sent and received) This report includes broadcast packets

This extract is just a sample of the packets ntop has seen.

Report created on Fri Jul 4 13:59:34 2008 [ntop uptime: 15 days 3:36:14]
Generated by ntop v.3.2 SourceForge .tgz [x86_64-unknown-linux-gnu]
© 1998-2005 by Luca Deri, built: Mar 6 2007 09:15:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)