Rut Row - bad mojo Scooby!	(C) 1998-2005 - Luca Deri

Network Interface(s)	Name Device Type Speed Sampling Rate MTU Header Address IPv6 Addresses eth0 eth0 Ethernet    0 1514 14 74.94.88.241 ::/0
Local Domain Name	wp.comcast.net
Sampling Since	Wed May 13 16:39:40 2009 [51 days 23:40:05]
Active End Nodes	133

Packets	Dropped (libpcap) 1.6% 2,116,440 Dropped (ntop) 0.0% 0 Total Received (ntop) 128,331,730 Total Packets Processed 128,331,730 Unicast 99.8% 128,129,099 Broadcast 0.2% 202,561 Multicast 0.0% 70 Shortest 36 bytes Average Size 521 bytes Longest 1,514 bytes <= 64 bytes 28.9% 37,080,003 64 to 128 bytes 23.1% 29,611,057 129 to 256 bytes 4.8% 6,195,523 257 to 512 bytes 4.4% 5,698,853 513 to 1024 bytes 3.9% 4,963,277 1025 to 1518 bytes 34.9% 44,783,017 > 1518 bytes 0.0% 0 Packets too long [> 1514] 0.0% 0 Bad Packets (Checksum) 0.0% 0
Traffic	Total 72.6 GB [128,331,730 Pkts] IP Traffic 72.5 GB [72.5 GB Pkts] Fragmented IP Traffic 4.8 MB [0.0%] Non IP Traffic 43.2 MB Average TTL 75 TTL <= 32 0.0% 27,859 32 < TTL <= 64 53.9% 69,177,525 64 < TTL <= 96 0.2% 237,662 96 < TTL <= 128 38.1% 48,920,876 128 < TTL <= 160 0.0% 195 160 < TTL <= 192 0.0% 9,893 192 < TTL <= 224 0.0% 94 224 < TTL <= 256 2.7% 3,445,043
Remote Hosts Distance
Network Load	Actual 384.3 Kbps 48.8 Pkts/sec Last Minute 561.2 Kbps 65.9 Pkts/sec Last 5 Minutes 231.8 Kbps 32.1 Pkts/sec Peak 8.8 Mbps 2032.2 Pkts/sec Average 138.8 Kbps 28.6 Pkts/sec
Historical Data	[ ]

Protocol	Data	Percentage
IP	72.5 GB	99.9%	TCP 70.1 GB 96.6% UDP 1.7 GB 2.3% ICMP 60.4 MB 0%   ICMPv6 3.7 KB 0%   Other IP 5.9 KB 0%
(R)ARP	31.4 MB	0%
IPv6	5.2 KB	0%

TCP/UDP Protocol	Data	Flows	Accumulated Percentage / Historical Protocol View
FTP	1.2 GB	2,378	1.7%
PROXY	9.8 MB	1,605	0%
HTTP	59.8 GB	2,019,247	82.5%
DNS	446.8 MB	3,358,039	0%
Telnet	135.5 KB	490	0%
NBios-IP	7.2 MB	114,712	0%
Mail	382.4 MB	2,489	0%
SNMP	2.3 MB	19,785	0%
NEWS	2.0 KB	13	0%
DHCP-BOOTP	6.5 KB	32	0%
NFS	6.1 MB	3,003	0%
X11	1002.7 KB	4,251	0%
SSH	358.0 MB	18,537	0%
Gnutella	1.3 MB	4,350	0%
Kazaa	714.9 KB	122	0%
WinMX	63.3 KB	58	0%
eDonkey	2.5 MB	638	0%
Messenger	87.7 MB	70,506	0%
Other TCP/UDP-based Protocols	10.2 GB	10,211,197	14.1%
Accumulated View
Historical View
Note: What is a flow? TCP: a flows is a TCP connection. UDP: a flow is a packet. TCP flows are not accounted for fully (sender and recipient) remote peers.

 

TCP/UDP Traffic Port Distribution:
Last Minute View

TCP/UDP Port		Total	Sent	Rcvd
www	80	2.7 MB	2.6 MB	92.8 KB
2718	2718	2.0 MB	24.2 KB	2.0 MB
2733	2733	428.7 KB	12.2 KB	416.5 KB
2735	2735	96.2 KB	8.7 KB	87.5 KB
2734	2734	87.2 KB	8.5 KB	78.8 KB
pop3s	995	19.0 KB	14.6 KB	4.4 KB
https	443	15.9 KB	12.8 KB	3.1 KB
2729	2729	10.3 KB	1.4 KB	8.9 KB
2736	2736	10.3 KB	951	9.3 KB
56242	56242	7.2 KB	1.2 KB	5.9 KB
47522	47522	7.1 KB	5.8 KB	1.3 KB
37545	37545	7.1 KB	5.8 KB	1.2 KB
56868	56868	7.0 KB	5.8 KB	1.2 KB
42159	42159	7.0 KB	5.7 KB	1.2 KB
51376	51376	7.0 KB	5.8 KB	1.2 KB
10302	10302	6.9 KB	5.7 KB	1.2 KB
47449	47449	3.8 KB	710	3.1 KB
2730	2730	2.9 KB	1.0 KB	1.9 KB
2731	2731	2.9 KB	1013	1.9 KB
2732	2732	2.9 KB	1.0 KB	1.9 KB
4565	4565	2.3 KB	506	1.9 KB
32859	32859	2.1 KB	578	1.5 KB
62333	62333	1.9 KB	1.4 KB	522
domain	53	1.8 KB	1.3 KB	538
45570	45570	1.7 KB	675	1.0 KB
4622	4622	1.5 KB	931	649
2066	2066	1.2 KB	612	587
45928	45928	1.1 KB	713	461
3000	3000	1.1 KB	461	713
56219	56219	626	78	548
1068	1068	561	336	225
85	85	561	225	336
Notes: sum(total traffic per port) = 2*(total IP traffic) because the traffic per port is counted twice (sent and received) This report includes broadcast packets

This extract is just a sample of the packets ntop has seen.

Report created on Sat Jul 4 16:19:45 2009 [ntop uptime: 51 days 23:40:05]
Generated by ntop v.3.2 SourceForge .tgz [i686-pc-linux-gnu]
© 1998-2005 by Luca Deri, built: May 21 2007 17:35:55.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"