Rut Row - bad mojo Scooby!	(C) 1998-2005 - Luca Deri

Packets	Dropped (libpcap) 0.0% 3,076 Dropped (ntop) 0.0% 0 Total Received (ntop) 27,775,914 Total Packets Processed 27,775,914 Unicast 99.9% 27,748,073 Broadcast 0.1% 27,836 Multicast 0.0% 5 Shortest 42 bytes Average Size 596 bytes Longest 1,514 bytes <= 64 bytes 35.8% 9,943,126 64 to 128 bytes 11.7% 3,259,473 129 to 256 bytes 2.6% 722,865 257 to 512 bytes 3.7% 1,036,826 513 to 1024 bytes 4.0% 1,106,777 1025 to 1518 bytes 42.1% 11,706,847 > 1518 bytes 0.0% 0 Packets too long [> 1514] 0.0% 0 Bad Packets (Checksum) 0.0% 0
Traffic	Total 18.2 GB [27,775,914 Pkts] IP Traffic 18.2 GB [18.2 GB Pkts] Fragmented IP Traffic 21.9 KB [0.0%] Non IP Traffic 5.2 MB Average TTL 84 TTL <= 32 0.1% 16,352 32 < TTL <= 64 49.8% 13,844,232 64 < TTL <= 96 0.0% 2,950 96 < TTL <= 128 46.3% 12,864,001 128 < TTL <= 160 0.0% 4 160 < TTL <= 192 0.0% 805 192 < TTL <= 224 0.0% 3 224 < TTL <= 256 3.4% 943,923
Remote Hosts Distance
Network Load	Actual 238.1 Kbps 62.8 Pkts/sec Last Minute 238.0 Kbps 62.8 Pkts/sec Last 5 Minutes 162.0 Kbps 42.4 Pkts/sec Peak 7.0 Mbps 978.5 Pkts/sec Average 194.9 Kbps 34.6 Pkts/sec

Protocol	Data	Percentage
IP	18.2 GB	100.0%	TCP 18.0 GB 98.8% UDP 225.6 MB 1.2% ICMP 4.3 MB 0%   ICMPv6 0.3 KB 0%   Other IP 0.1 KB 0%
(R)ARP	3.8 MB	0%
IPv6	0.4 KB	0%

TCP/UDP Protocol	Data	Flows	Accumulated Percentage / Historical Protocol View
FTP	7.2 MB	466	0%
PROXY	2.2 MB	364	0%
HTTP	15.4 GB	381,062	84.7%
DNS	78.6 MB	597,220	0%
Telnet	18.1 KB	83	0%
NBios-IP	7.4 KB	52	0%
Mail	141.3 MB	64,833	0%
NEWS	5.6 KB	64	0%
DHCP-BOOTP	4.1 KB	30	0%
NFS	2.2 MB	24,914	0%
X11	209.4 KB	920	0%
SSH	168.7 MB	440	0%
Gnutella	650.4 KB	406	0%
Kazaa	29.3 KB	13	0%
WinMX	0.2 KB	2	0%
eDonkey	20.3 KB	55	0%
Messenger	7.7 MB	233	0%
Other TCP/UDP-based Protocols	2.4 GB	916,752	13.1%
Accumulated View
Note: What is a flow? TCP: a flows is a TCP connection. UDP: a flow is a packet. TCP flows are not accounted for fully (sender and recipient) remote peers.

 

TCP/UDP Traffic Port Distribution:
Last Minute View

TCP/UDP Port		Total	Sent	Rcvd
www	80	1.6 MB	1.2 MB	441.0 KB
2808	2808	177.3 KB	9.3 KB	168.0 KB
2023	2023	134.8 KB	3.2 KB	131.6 KB
2022	2022	94.0 KB	2.7 KB	91.3 KB
2008	2008	62.8 KB	16.1 KB	46.7 KB
dict	2628	58.7 KB	12.8 KB	45.9 KB
2627	2627	55.8 KB	11.4 KB	44.4 KB
ripd	2602	52.5 KB	12.1 KB	40.4 KB
pop3s	995	50.2 KB	46.1 KB	4.1 KB
2584	2584	47.4 KB	1.4 KB	45.9 KB
2001	2001	44.4 KB	2.1 KB	42.3 KB
2007	2007	42.7 KB	3.9 KB	38.8 KB
cfinger	2003	39.8 KB	1.5 KB	38.3 KB
2015	2015	38.2 KB	8.1 KB	30.1 KB
https	443	33.8 KB	26.4 KB	7.5 KB
3037	3037	23.6 KB	2.5 KB	21.1 KB
2351	2351	22.5 KB	11.3 KB	11.2 KB
3056	3056	21.5 KB	11.9 KB	9.5 KB
zebra	2601	21.2 KB	11.0 KB	10.2 KB
2407	2407	19.6 KB	10.0 KB	9.7 KB
3040	3040	19.4 KB	1.4 KB	18.0 KB
36921	36921	18.1 KB	3.6 KB	14.5 KB
webcache	8080	16.8 KB	12.3 KB	4.5 KB
1662	1662	16.8 KB	4.5 KB	12.3 KB
3066	3066	16.7 KB	2.7 KB	14.0 KB
3026	3026	16.7 KB	2.7 KB	14.0 KB
3008	3008	16.4 KB	2.6 KB	13.8 KB
3112	3112	16.2 KB	2.4 KB	13.9 KB
3055	3055	16.1 KB	2.4 KB	13.8 KB
2016	2016	15.9 KB	7.1 KB	8.8 KB
2995	2995	14.6 KB	7.6 KB	7.0 KB
2017	2017	13.1 KB	6.0 KB	7.1 KB
Notes: sum(total traffic per port) = 2*(total IP traffic) because the traffic per port is counted twice (sent and received) This report includes broadcast packets

This extract is just a sample of the packets ntop has seen.

Report created on Fri Nov 21 19:46:45 2008 [ntop uptime: 9 days 6:59:08]
Generated by ntop v.3.2 SourceForge .tgz [i686-pc-linux-gnu]
© 1998-2005 by Luca Deri, built: May 21 2007 17:35:55.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)