Traffic Trace Info
DumpFile: 200803180015.dump
FileSize: 1225.46MB
Id: 200803180015
StartTime: Tue Mar 18 00:15:00 2008
EndTime: Tue Mar 18 00:30:01 2008
TotalTime: 900.54 seconds
TotalCapSize: 965.62MB CapLen: 96 bytes
# of packets: 17027935 (9092.71MB)
AvgRate: 84.70Mbps stddev:15.68M
IP flow (unique src/dst pair) Information
# of flows: 726309 (avg. 23.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
22.9% 1.7% 1.5% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 389298
Top 10 bandwidth usage (bytes/total in %):
23.5% 23.5% 9.4% 7.9% 6.7% 3.9% 3.4% 1.8% 1.7% 1.7%
# of IPv6 addresses: 1974
Top 10 bandwidth usage (bytes/total in %):
18.4% 18.4% 13.5% 11.3% 7.4% 6.1% 5.1% 5.0% 4.1% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180015.pktlen.png)
detailed numbers
[ 32- 63]: 3094318
[ 64- 127]: 6276643
[ 128- 255]: 1201539
[ 256- 511]: 431547
[ 512- 1023]: 408014
[ 1024- 2047]: 5615874
Protocol Breakdown
![[protocol breakdown chart]](200803180015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17027935 (100.00%) 9534396354 (100.00%) 559.93
ip 16985687 ( 99.75%) 9528454626 ( 99.94%) 560.97
tcp 13524063 ( 79.42%) 8843735076 ( 92.76%) 653.93
http(s) 3049621 ( 17.91%) 4192858721 ( 43.98%) 1374.88
http(c) 1724072 ( 10.12%) 165245204 ( 1.73%) 95.85
squid 513670 ( 3.02%) 319960297 ( 3.36%) 622.89
smtp 938699 ( 5.51%) 143835918 ( 1.51%) 153.23
ftp 187126 ( 1.10%) 49219913 ( 0.52%) 263.03
pop3 5453 ( 0.03%) 3417168 ( 0.04%) 626.66
imap 12790 ( 0.08%) 7868033 ( 0.08%) 615.17
telnet 6144 ( 0.04%) 4223974 ( 0.04%) 687.50
ssh 4623852 ( 27.15%) 2568423106 ( 26.94%) 555.47
dns 8602 ( 0.05%) 10374992 ( 0.11%) 1206.11
bgp 193 ( 0.00%) 64566 ( 0.00%) 334.54
napster 109 ( 0.00%) 75246 ( 0.00%) 690.33
realaud 26 ( 0.00%) 3823 ( 0.00%) 147.04
rtsp 1670 ( 0.01%) 110962 ( 0.00%) 66.44
icecast 12559 ( 0.07%) 15227794 ( 0.16%) 1212.50
hotline 13 ( 0.00%) 1382 ( 0.00%) 106.31
other 2439461 ( 14.33%) 1362823797 ( 14.29%) 558.66
udp 2411673 ( 14.16%) 594638608 ( 6.24%) 246.57
dns 1203440 ( 7.07%) 177833731 ( 1.87%) 147.77
realaud 23 ( 0.00%) 2768 ( 0.00%) 120.35
halflif 25 ( 0.00%) 3360 ( 0.00%) 134.40
starcra 40 ( 0.00%) 7471 ( 0.00%) 186.78
everque 22 ( 0.00%) 3784 ( 0.00%) 172.00
unreal 59 ( 0.00%) 7294 ( 0.00%) 123.63
quake 17 ( 0.00%) 2382 ( 0.00%) 140.12
cuseeme 4 ( 0.00%) 361 ( 0.00%) 90.25
other 1208005 ( 7.09%) 416756809 ( 4.37%) 345.00
icmp 1038755 ( 6.10%) 88519671 ( 0.93%) 85.22
ipip 317 ( 0.00%) 38178 ( 0.00%) 120.44
ip6 1084 ( 0.01%) 146509 ( 0.00%) 135.16
other 9795 ( 0.06%) 1376584 ( 0.01%) 140.54
frag 2025 ( 0.01%) 1795501 ( 0.02%) 886.67
ip6 42248 ( 0.25%) 5941728 ( 0.06%) 140.64
tcp6 20004 ( 0.12%) 1891143 ( 0.02%) 94.54
http(s) 43 ( 0.00%) 56840 ( 0.00%) 1321.86
http(c) 17095 ( 0.10%) 1315137 ( 0.01%) 76.93
squid 5 ( 0.00%) 824 ( 0.00%) 164.80
smtp 572 ( 0.00%) 263117 ( 0.00%) 459.99
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 8 ( 0.00%) 1787 ( 0.00%) 223.38
bgp 68 ( 0.00%) 7335 ( 0.00%) 107.87
other 2179 ( 0.01%) 242987 ( 0.00%) 111.51
udp6 17068 ( 0.10%) 3343553 ( 0.04%) 195.90
dns 15124 ( 0.09%) 2767242 ( 0.03%) 182.97
other 1944 ( 0.01%) 576311 ( 0.01%) 296.46
icmp6 5145 ( 0.03%) 702816 ( 0.01%) 136.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200803180015.dump.gz (448.64 MB)