(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Global Traffic Statistics

Network Interface(s)
NameDeviceTypeSpeedSampling RateMTUHeaderAddressIPv6 Addresses
eth0 Change nameeth0Ethernet  015141493.155.130.4::/0
eth0:0 Change nameeth0:0BSD loopback virtual  082324172.16.10.2 
Local Domain Nameitservice-bg.net 
Sampling SinceTue Mar 2 09:14:54 2010 [7 days 22:43:04]
Active End Nodes318

 

Traffic Report for 'eth0' [switch]

Packets
Dropped (libpcap)0.2%64,008
Dropped (ntop)0.0%0
Total Received (ntop)42,021,350
Total Packets Processed42,021,350
Unicast93.3%39,219,345
Broadcast6.1%2,566,254
Multicast0.6%235,751
Shortest42 bytes
Average Size256 bytes
Longest65,394 bytes
Size <= 64 bytes21.4%8,993,672
64 < Size <= 128 bytes42.4%17,831,922
128 < Size <= 256 bytes6.0%2,519,431
256 < Size <= 512 bytes1.9%813,765
512 < Size <= 1024 bytes2.0%849,370
1024 < Size <= 1518 bytes14.3%5,994,011
Size > 1518 bytes11.9%5,019,179
Packets too long [> 1514]11.9%5,019,181
Bad Packets (Checksum)0.0%0
Traffic
Total42.1 GBytes [42,021,350 Pkts]
IP Traffic18.4 GBytes [41,267,109 Pkts]
Fragmented IP Traffic1.9 MBytes [0.0%]
Non IP Traffic23.7 GBytes
Average TTL67
TTL <= 321.1%464,628
32 < TTL <= 6471.3%29,979,703
64 < TTL <= 960.0%7,843
96 < TTL <= 12823.7%9,942,548
128 < TTL <= 1600.0%4
160 < TTL <= 1920.0%16
192 < TTL <= 2240.0%4,014
224 < TTL <= 2562.1%868,353
Remote Hosts Distance
Network Load
Actual10.9 Kbit/s7.0 Pkt/s
Last Minute15.3 Kbit/s10.3 Pkt/s
Last 5 Minutes22.2 Kbit/s23.2 Pkt/s
Peak63.4 Mbit/s7804.3 Pkt/s
Average526.7 Kbit/s61.2 Pkt/s
Historical Data [ View rrd charts of historical data for this interface ]

 

Global Protocol Distribution

ProtocolDataPercentage
IP18.4 GBytes43.7%
TCP16.7 GBytes 90.8%
90.8%

 

UDP938.2 MBytes 5.0%
5.0%

 

ICMP789.7 MBytes 4.2%
4.2%

 

ICMPv689.2 KBytes 0% 
IGMP2.1 MBytes 0% 
Other IP96.1 KBytes 0% 
(R)ARP17.5 MBytes 0% 
NetBios157.0 KBytes 0% 
IPv61.4 MBytes 0% 
STP19.0 MBytes 0% 
Other895.7 KBytes 0% 

 

Global TCP/UDP Protocol Distribution

TCP/UDP ProtocolDataFlowsAccumulated Percentage / Historical Protocol View
FTP86.6 MBytes 64,0530% 

 

PROXY26.9 KBytes 1480% 

 

HTTP7.7 GBytes 272,01841.8%
41.8%

 

 

DNS856.6 MBytes 6,335,1224.5%
4.5%

 

 

Telnet0.8 KBytes 60% 

 

NBios-IP5.3 MBytes 29,2890% 

 

Mail110.1 MBytes 48,0440% 

 

SNMP4.0 MBytes 32,5620% 
DHCP-BOOTP3.7 MBytes 11,3190% 

 

NFS33.1 KBytes 1010% 

 

X115.8 KBytes 570% 

 

SSH3.0 GBytes 2,23916.2%
16.2%

 

 

Gnutella0.2 KBytes 20% 
Kazaa16.5 KBytes 470% 

 

eDonkey83.7 KBytes 2390% 

 

Messenger37.8 KBytes 1000% 

 

Other TCP/UDP-based Protocols6.7 GBytes 754,37436.4%
36.4%

 

Accumulated View
Historical View
Note:
  • What is a flow?
    • TCP: a flows is a TCP connection.
    • UDP: a flow is a set of packets with the same protocol/peers/port.
  • TCP flows are not accounted for fully (sender and recipient) remote peers.

 

TCP/UDP Traffic Port Distribution:
Last Minute View

TCP/UDP PortTotalSentRcvd
00164.8 KBytes164.8 KBytes0
domain5325.0 KBytes17.6 KBytes7.3 KBytes
www8018.8 KBytes14.5 KBytes4.3 KBytes
56623566239.3 KBytes1.1 KBytes8.3 KBytes
190019006.0 KBytes06.0 KBytes
39575395753.1 KBytes8822.2 KBytes
40393403933.1 KBytes8702.2 KBytes
60626606261.8 KBytes8171.0 KBytes
56226562261.5 KBytes737781
3295632956820597223
30003000820223597
201612016161489525
528535285359278514
496874968750578427
564035640348989400
514705147048581404
368333683347997382
596045960447381392
224602246047389384
582955829546476388
464094640946194367
163871638746197364
606766067645381372
225812258145381372
225552255544880368
101571015744289353
7429742941794323
508115081141377336
109710974074070
108910894044040
110011004014010
225572255740081319
Notes:
  • sum(total traffic per port) = 2*(total IP traffic)
    because the traffic per port is counted twice (sent and received)
  • This report includes broadcast packets

This extract is just a sample of the packets ntop has seen.

Report created on Wed Mar 10 07:57:58 2010 [ntop uptime: 7 days 22:43:04]
Generated by ntop v.3.3 [i686-pc-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 15:54:33.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"