Rut Row - bad mojo Scooby!	(C) 1998-2005 - Luca Deri

Packets	Dropped (libpcap) 0.0% 113,261 Dropped (ntop) 0.0% 0 Total Received (ntop) 323,056,220 Total Packets Processed 323,056,220 Unicast 99.9% 322,840,028 Broadcast 0.1% 216,192 Multicast 0.0% 0 Shortest 42 bytes Average Size 305 bytes Longest 8,231 bytes <= 64 bytes 35.8% 115,680,446 64 to 128 bytes 29.2% 94,177,397 129 to 256 bytes 0.7% 2,202,906 257 to 512 bytes 2.8% 9,007,209 513 to 1024 bytes 5.5% 17,906,635 1025 to 1518 bytes 17.6% 56,787,810 > 1518 bytes 8.4% 27,293,817 Packets too long [> 1514] 8.4% 27,293,838 Bad Packets (Checksum) 0.0% 0
Traffic	Total 212.9 GB [323,056,220 Pkts] IP Traffic 143.7 GB [143.7 GB Pkts] Fragmented IP Traffic 0 [0.0%] Non IP Traffic 69.2 GB Average TTL 66 TTL <= 32 0.1% 281,252 32 < TTL <= 64 71.3% 230,443,926 64 < TTL <= 96 0.0% 82,566 96 < TTL <= 128 28.1% 90,666,088 128 < TTL <= 160 0.0% 2,947 160 < TTL <= 192 0.0% 83,812 192 < TTL <= 224 0.0% 7,805 224 < TTL <= 256 0.4% 1,410,096
Remote Hosts Distance
Network Load	Actual 1.1 Mbps 206.4 Pkts/sec Last Minute 1.0 Mbps 186.4 Pkts/sec Last 5 Minutes 1.2 Mbps 199.1 Pkts/sec Peak 5.8 Mbps 1264.7 Pkts/sec Average 1.3 Mbps 246.8 Pkts/sec
Historical Data	[ ]

Protocol	Data	Percentage
IP	143.7 GB	67.5%	TCP 143.4 GB 99.8% UDP 280.9 MB 0%   ICMP 11.2 MB 0%   Other IP 8.2 KB 0%
(R)ARP	2.7 MB	0%

TCP/UDP Protocol	Data	Flows	Accumulated Percentage / Historical Protocol View
FTP	6.4 KB	15	0%
PROXY	5.9 KB	18	0%
HTTP	143.4 GB	16,389,965	99.8%
DNS	278.5 MB	1,995,085	0%
Telnet	2.5 KB	21	0%
NBios-IP	276.3 KB	2,752	0%
Mail	2.2 MB	8,784	0%
X11	37.6 KB	350	0%
SSH	63.0 MB	16,953	0%
Gnutella	0.1 KB	2	0%
eDonkey	0.4 KB	2	0%
Other TCP/UDP-based Protocols	13.6 MB	16,430,868	0%
Accumulated View
Historical View
Note: What is a flow? TCP: a flows is a TCP connection. UDP: a flow is a packet. TCP flows are not accounted for fully (sender and recipient) remote peers.

 

TCP/UDP Traffic Port Distribution:
Last Minute View

TCP/UDP Port		Total	Sent	Rcvd
www	80	4.0 MB	3.4 MB	552.5 KB
60674	60674	114.3 KB	3.8 KB	110.4 KB
60673	60673	97.3 KB	3.4 KB	93.8 KB
57380	57380	94.8 KB	7.2 KB	87.5 KB
55356	55356	66.9 KB	4.3 KB	62.6 KB
60670	60670	65.2 KB	2.2 KB	63.0 KB
3049	3049	58.8 KB	1.9 KB	56.9 KB
60677	60677	56.1 KB	2.9 KB	53.2 KB
60682	60682	55.7 KB	2.4 KB	53.4 KB
60676	60676	53.5 KB	1.9 KB	51.6 KB
51958	51958	51.8 KB	3.0 KB	48.8 KB
57540	57540	47.9 KB	2.2 KB	45.8 KB
6096	6096	45.8 KB	2.1 KB	43.6 KB
60672	60672	44.9 KB	1.8 KB	43.1 KB
1975	1975	43.6 KB	3.7 KB	39.9 KB
60675	60675	43.3 KB	2.4 KB	40.8 KB
51983	51983	43.0 KB	1.8 KB	41.3 KB
50810	50810	42.7 KB	2.5 KB	40.3 KB
56822	56822	42.6 KB	4.4 KB	38.2 KB
4761	4761	42.5 KB	1.9 KB	40.6 KB
60535	60535	41.2 KB	3.8 KB	37.4 KB
6055	6055	41.1 KB	1.9 KB	39.1 KB
58329	58329	40.6 KB	1.9 KB	38.7 KB
6089	6089	40.3 KB	2.7 KB	37.6 KB
6081	6081	38.1 KB	2.0 KB	36.1 KB
50821	50821	37.9 KB	2.4 KB	35.5 KB
44031	44031	37.0 KB	1.9 KB	35.1 KB
3024	3024	36.6 KB	1.4 KB	35.3 KB
3255	3255	36.5 KB	2.7 KB	33.9 KB
53337	53337	33.5 KB	3.6 KB	29.9 KB
52828	52828	31.9 KB	1.8 KB	30.1 KB
44019	44019	31.4 KB	1.5 KB	29.9 KB
Notes: sum(total traffic per port) = 2*(total IP traffic) because the traffic per port is counted twice (sent and received) This report includes broadcast packets

This extract is just a sample of the packets ntop has seen.

Report created on Fri Jul 4 14:00:07 2008 [ntop uptime: 15 days 3:36:47]
Generated by ntop v.3.2 SourceForge .tgz [x86_64-unknown-linux-gnu]
© 1998-2005 by Luca Deri, built: Mar 6 2007 09:15:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)