Traffic Trace Info
DumpFile: 200803180115.dump
FileSize: 949.67MB
Id: 200803180115
StartTime: Tue Mar 18 01:15:00 2008
EndTime: Tue Mar 18 01:30:00 2008
TotalTime: 899.60 seconds
TotalCapSize: 747.63MB CapLen: 96 bytes
# of packets: 13240237 (6842.80MB)
AvgRate: 63.80Mbps stddev:7.93M
IP flow (unique src/dst pair) Information
# of flows: 644537 (avg. 20.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.1% 2.0% 1.5% 1.2% 1.1% 1.1% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 333986
Top 10 bandwidth usage (bytes/total in %):
12.6% 11.4% 7.4% 5.3% 3.1% 2.8% 2.8% 2.7% 2.6% 2.6%
# of IPv6 addresses: 1754
Top 10 bandwidth usage (bytes/total in %):
22.6% 18.0% 10.1% 7.5% 6.2% 4.8% 4.5% 4.4% 4.4% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180115.pktlen.png)
detailed numbers
[ 32- 63]: 2600646
[ 64- 127]: 4776565
[ 128- 255]: 967173
[ 256- 511]: 385547
[ 512- 1023]: 392729
[ 1024- 2047]: 4117577
Protocol Breakdown
![[protocol breakdown chart]](200803180115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13240237 (100.00%) 7175197079 (100.00%) 541.92
ip 13212054 ( 99.79%) 7170304255 ( 99.93%) 542.71
tcp 10705667 ( 80.86%) 6651170926 ( 92.70%) 621.28
http(s) 3139880 ( 23.71%) 4322175090 ( 60.24%) 1376.54
http(c) 1845668 ( 13.94%) 168158083 ( 2.34%) 91.11
squid 498715 ( 3.77%) 296795473 ( 4.14%) 595.12
smtp 925422 ( 6.99%) 154708930 ( 2.16%) 167.18
ftp 160336 ( 1.21%) 51336593 ( 0.72%) 320.18
pop3 5787 ( 0.04%) 3705381 ( 0.05%) 640.29
imap 5573 ( 0.04%) 2854609 ( 0.04%) 512.22
telnet 318 ( 0.00%) 20478 ( 0.00%) 64.40
ssh 1609925 ( 12.16%) 229296246 ( 3.20%) 142.43
dns 1954 ( 0.01%) 159361 ( 0.00%) 81.56
bgp 209 ( 0.00%) 62434 ( 0.00%) 298.73
napster 47 ( 0.00%) 4688 ( 0.00%) 99.74
realaud 55 ( 0.00%) 6910 ( 0.00%) 125.64
rtsp 34077 ( 0.26%) 28064061 ( 0.39%) 823.55
icecast 12471 ( 0.09%) 15205735 ( 0.21%) 1219.29
hotline 23 ( 0.00%) 2697 ( 0.00%) 117.26
other 2465206 ( 18.62%) 1378614097 ( 19.21%) 559.23
udp 1786593 ( 13.49%) 458157451 ( 6.39%) 256.44
dns 1081607 ( 8.17%) 157846382 ( 2.20%) 145.94
realaud 32 ( 0.00%) 3357 ( 0.00%) 104.91
halflif 43 ( 0.00%) 7811 ( 0.00%) 181.65
starcra 20 ( 0.00%) 2832 ( 0.00%) 141.60
everque 28 ( 0.00%) 3345 ( 0.00%) 119.46
unreal 34 ( 0.00%) 4641 ( 0.00%) 136.50
quake 12906 ( 0.10%) 3010711 ( 0.04%) 233.28
cuseeme 3 ( 0.00%) 271 ( 0.00%) 90.33
other 691790 ( 5.22%) 297243052 ( 4.14%) 429.67
icmp 707527 ( 5.34%) 58697935 ( 0.82%) 82.96
ipip 290 ( 0.00%) 35084 ( 0.00%) 120.98
ip6 1133 ( 0.01%) 158428 ( 0.00%) 139.83
other 10844 ( 0.08%) 2084431 ( 0.03%) 192.22
frag 5883 ( 0.04%) 4966838 ( 0.07%) 844.27
ip6 28183 ( 0.21%) 4892824 ( 0.07%) 173.61
tcp6 5185 ( 0.04%) 850181 ( 0.01%) 163.97
http(s) 58 ( 0.00%) 67147 ( 0.00%) 1157.71
http(c) 1609 ( 0.01%) 162532 ( 0.00%) 101.01
squid 5 ( 0.00%) 824 ( 0.00%) 164.80
smtp 967 ( 0.01%) 326700 ( 0.00%) 337.85
ftp 546 ( 0.00%) 63985 ( 0.00%) 117.19
pop3 36 ( 0.00%) 3344 ( 0.00%) 92.89
dns 5 ( 0.00%) 542 ( 0.00%) 108.40
bgp 60 ( 0.00%) 6210 ( 0.00%) 103.50
other 1899 ( 0.01%) 218897 ( 0.00%) 115.27
udp6 17590 ( 0.13%) 3303076 ( 0.05%) 187.78
dns 15908 ( 0.12%) 2942846 ( 0.04%) 184.99
other 1682 ( 0.01%) 360230 ( 0.01%) 214.17
icmp6 5369 ( 0.04%) 728292 ( 0.01%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 7059 ( 0.00%) 882.38
tcpdump file: 200803180115.dump.gz (362.54 MB)