Traffic Trace Info
DumpFile: 200803180045.dump
FileSize: 1031.00MB
Id: 200803180045
StartTime: Tue Mar 18 00:45:00 2008
EndTime: Tue Mar 18 01:00:00 2008
TotalTime: 899.85 seconds
TotalCapSize: 810.02MB CapLen: 96 bytes
# of packets: 14481727 (7040.23MB)
AvgRate: 65.62Mbps stddev:10.99M
IP flow (unique src/dst pair) Information
# of flows: 681949 (avg. 21.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.0% 2.8% 1.9% 1.9% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 350727
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.1% 9.5% 8.6% 5.3% 3.8% 3.1% 3.0% 2.9% 2.9%
# of IPv6 addresses: 1962
Top 10 bandwidth usage (bytes/total in %):
15.0% 12.7% 10.9% 8.6% 6.6% 5.4% 4.5% 4.5% 4.0% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180045.pktlen.png)
detailed numbers
[ 32- 63]: 2946701
[ 64- 127]: 5404814
[ 128- 255]: 1105145
[ 256- 511]: 401170
[ 512- 1023]: 387838
[ 1024- 2047]: 4236059
Protocol Breakdown
![[protocol breakdown chart]](200803180045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14481727 (100.00%) 7382211843 (100.00%) 509.76
ip 14455085 ( 99.82%) 7377540590 ( 99.94%) 510.38
tcp 11305763 ( 78.07%) 6667371151 ( 90.32%) 589.73
http(s) 2855402 ( 19.72%) 3879029200 ( 52.55%) 1358.49
http(c) 1740223 ( 12.02%) 166036778 ( 2.25%) 95.41
squid 588580 ( 4.06%) 333917641 ( 4.52%) 567.33
smtp 955680 ( 6.60%) 153488549 ( 2.08%) 160.61
ftp 197791 ( 1.37%) 54672614 ( 0.74%) 276.42
pop3 17916 ( 0.12%) 14779702 ( 0.20%) 824.94
imap 7956 ( 0.05%) 2588925 ( 0.04%) 325.41
telnet 350 ( 0.00%) 42497 ( 0.00%) 121.42
ssh 2015520 ( 13.92%) 294579959 ( 3.99%) 146.16
dns 1836 ( 0.01%) 186769 ( 0.00%) 101.73
bgp 197 ( 0.00%) 59967 ( 0.00%) 304.40
napster 127 ( 0.00%) 18981 ( 0.00%) 149.46
realaud 24 ( 0.00%) 3483 ( 0.00%) 145.12
rtsp 6349 ( 0.04%) 4318808 ( 0.06%) 680.23
icecast 12527 ( 0.09%) 15218120 ( 0.21%) 1214.83
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2905272 ( 20.06%) 1748427778 ( 23.68%) 601.81
udp 2260795 ( 15.61%) 637546306 ( 8.64%) 282.00
dns 1160295 ( 8.01%) 172360880 ( 2.33%) 148.55
realaud 37 ( 0.00%) 4351 ( 0.00%) 117.59
halflif 21 ( 0.00%) 4988 ( 0.00%) 237.52
starcra 42 ( 0.00%) 7522 ( 0.00%) 179.10
everque 28 ( 0.00%) 4205 ( 0.00%) 150.18
unreal 49 ( 0.00%) 6674 ( 0.00%) 136.20
quake 15 ( 0.00%) 1936 ( 0.00%) 129.07
cuseeme 2 ( 0.00%) 145 ( 0.00%) 72.50
other 1100272 ( 7.60%) 465131964 ( 6.30%) 422.74
icmp 876669 ( 6.05%) 70647103 ( 0.96%) 80.59
ipip 306 ( 0.00%) 36220 ( 0.00%) 118.37
ip6 1058 ( 0.01%) 146684 ( 0.00%) 138.64
other 10494 ( 0.07%) 1793126 ( 0.02%) 170.87
frag 2580 ( 0.02%) 2518901 ( 0.03%) 976.32
ip6 26642 ( 0.18%) 4671253 ( 0.06%) 175.33
tcp6 4973 ( 0.03%) 759532 ( 0.01%) 152.73
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1566 ( 0.01%) 145431 ( 0.00%) 92.87
squid 32 ( 0.00%) 4399 ( 0.00%) 137.47
smtp 940 ( 0.01%) 331377 ( 0.00%) 352.53
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 33 ( 0.00%) 12870 ( 0.00%) 390.00
dns 16 ( 0.00%) 3584 ( 0.00%) 224.00
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2287 ( 0.02%) 251894 ( 0.00%) 110.14
udp6 15764 ( 0.11%) 3118176 ( 0.04%) 197.80
dns 13829 ( 0.10%) 2593741 ( 0.04%) 187.56
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
other 1934 ( 0.01%) 523859 ( 0.01%) 270.87
icmp6 5869 ( 0.04%) 784358 ( 0.01%) 133.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5107 ( 0.00%) 851.17
tcpdump file: 200803180045.dump.gz (389.00 MB)