Global Traffic Statistics

Please enable make sure that the ntop html/ directory is properly installed

Global Traffic Statistics

Network Interface(s)

Name	Device	Type	MTU	Header	Address
bge0	bge0	Ethernet	1514	14	163.30.63.129
bge1	bge1	Ethernet	1514	14	192.168.1.1
cPacket-device.6	cPacket-device.6	Ethernet	1514	14	0.0.0.0
cPacket-device.7	cPacket-device.7	Ethernet	1514	14	0.0.0.0

Local Domain Name

kjjhs.tyc.edu.tw

Sampling Since

Fri Jun 28 00:00:02 2024 [11:06:39]

Active End Nodes

206

Traffic Report for 'bge0' [switch]

Packets


Dropped (libpcap)	0.0%	0
Dropped (ntop)	0.0%	0
Total Received (ntop)	988,656
Total Packets Processed	988,656
Unicast	41.9%	413,886
Broadcast	46.6%	461,067
Multicast	11.5%	113,703
Shortest	42 bytes
Average Size	110 bytes
Longest	1,514 bytes
Size <= 64 bytes	48.5%	479,501
64 < Size <= 128 bytes	19.6%	193,571
128 < Size <= 256 bytes	25.7%	254,006
256 < Size <= 512 bytes	2.3%	23,232
512 < Size <= 1024 bytes	3.2%	31,780
1024 < Size <= 1518 bytes	0.7%	6,566
Size > 1518 bytes	0.0%	0

Packets too long [> 1514]	0.0%	0
Bad Packets (Checksum)	30.4%	300,432

Traffic


Total	124.3 MBytes [988,656 Pkts]
IPv4 Traffic	41.6 MBytes [539,139 Pkts]
Fragmented IPv4 Traffic	24.7 KBytes [0.1%]
Non IPv4 Traffic	82.7 MBytes
Average TTL	25
TTL <= 32	10.1%	99,949
32 < TTL <= 64	9.5%	93,969
64 < TTL <= 96	0.0%	162
96 < TTL <= 128	2.3%	22,328
128 < TTL <= 160	0.0%	0
160 < TTL <= 192	0.0%	0
192 < TTL <= 224	0.0%	201
224 < TTL <= 256	2.2%	22,098

Remote Hosts Distance

Network Load

Actual	44.0 Kbit/s	42.0 Pkt/s
Last Minute	36.3 Kbit/s	38.2 Pkt/s
Last 5 Minutes	37.2 Kbit/s	37.5 Pkt/s
Peak	48.7 Kbit/s	45.5 Pkt/s
Average	26.1 Kbit/s	24.7 Pkt/s

Historical Data

[ ]

Global Protocol Distribution

Protocol Data Percentage

IP 41.6 MBytes 33.4%
TCP 10.3 MBytes 24.9%

UDP 31.2 MBytes 75.0%

ICMP 64.9 KBytes 0%

(R)ARP 18.6 MBytes 44.7%

STP 1.1 MBytes 0%

Other 1.1 MBytes 0%

Global TCP/UDP Protocol Distribution

TCP/UDP Protocol

Data

Flows

Accumulated Percentage / Historical Protocol View

FTP

4.9 KBytes

HTTP

4.9 KBytes

DNS

0.9 KBytes

Telnet

8.1 KBytes

125

NBios-IP

1.3 MBytes

11,160

3.2%

Mail

25.8 KBytes

DHCP-BOOTP

503.6 KBytes

1,494

1.2%

SNMP

19.5 KBytes

170

NNTP

0.4 KBytes

NFS/AFS

0.1 KBytes

VoIP

3.5 KBytes

X11

2.0 KBytes

SSH

8.7 MBytes

9,756

20.9%

WinMX

0.1 KBytes

BitTorrent

0.8 KBytes

Messenger

0.9 KBytes

Other TCP/UDP-based Protocols

31.0 MBytes

159,352

74.6%

Accumulated View

Historical View

Note:

What is a flow?
- TCP: a flows is a TCP connection.
- UDP: a flow is a set of packets with the same protocol/peers/port.
TCP flows are not accounted for fully (sender and recipient) remote peers.

TCP/UDP Traffic Port Distribution:
Last Minute View

TCP/UDP Port		Total	Sent	Rcvd
1900	1900	14.3 MBytes	152.8 KBytes	14.1 MBytes
ssh	22	8.7 MBytes	1.4 KBytes	8.7 MBytes
3702	3702	7.1 MBytes	13.5 KBytes	7.1 MBytes
12223	12223	5.5 MBytes	2.8 MBytes	2.8 MBytes
mdns	5353	5.5 MBytes	2.7 MBytes	2.7 MBytes
17500	17500	3.1 MBytes	1.5 MBytes	1.5 MBytes
53492	53492	1.8 MBytes	1.8 MBytes	0
netbios-ns	137	1.6 MBytes	818.2 KBytes	818.3 KBytes
58694	58694	1.3 MBytes	1.3 MBytes	0
3000	3000	1.2 MBytes	0	1.2 MBytes
netbios-dgm	138	1.1 MBytes	538.0 KBytes	538.0 KBytes
65059	65059	648.9 KBytes	648.9 KBytes	0
52273	52273	613.5 KBytes	613.5 KBytes	0
58799	58799	612.6 KBytes	612.6 KBytes	0
bootpc	68	503.6 KBytes	503.6 KBytes	0
bootps	67	503.6 KBytes	0	503.6 KBytes
7790	7790	466.9 KBytes	0	466.9 KBytes
5355	5355	436.7 KBytes	0	436.7 KBytes
56321	56321	300.7 KBytes	300.6 KBytes	120
58143	58143	262.4 KBytes	262.4 KBytes	0
51746	51746	248.1 KBytes	248.1 KBytes	0
60185	60185	223.6 KBytes	223.6 KBytes	0
51115	51115	220.3 KBytes	220.3 KBytes	0
64602	64602	107.7 KBytes	107.7 KBytes	0
54918	54918	101.5 KBytes	101.5 KBytes	0
61049	61049	71.2 KBytes	71.2 KBytes	0
53198	53198	61.6 KBytes	61.6 KBytes	0
57793	57793	59.2 KBytes	59.2 KBytes	0
60292	60292	53.2 KBytes	53.2 KBytes	0
51386	51386	52.5 KBytes	52.5 KBytes	0
50001	50001	48.4 KBytes	1.2 KBytes	47.2 KBytes
50003	50003	48.3 KBytes	1.1 KBytes	47.2 KBytes
Notes: sum(total traffic per port) = 2*(total IP traffic) because the traffic per port is counted twice (sent and received) This report includes broadcast packets

This extract is just a sample of the packets ntop has seen.