Traffic Trace Info
DumpFile: -
Id: 200803180130
StartTime: Tue Mar 18 01:30:00 2008
EndTime: Tue Mar 18 01:45:00 2008
TotalTime: 899.90 seconds
TotalCapSize: 787.28MB CapLen: 96 bytes
# of packets: 14124729 (7660.08MB)
AvgRate: 71.41Mbps stddev:11.04M
IP flow (unique src/dst pair) Information
# of flows: 752293 (avg. 18.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 1.7% 1.6% 1.6% 1.2% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 422572
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.0% 5.9% 5.1% 5.1% 4.3% 4.1% 3.3% 2.8% 2.7%
# of IPv6 addresses: 1938
Top 10 bandwidth usage (bytes/total in %):
22.1% 17.5% 9.2% 7.0% 5.9% 4.8% 4.3% 4.1% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180130.pktlen.png)
detailed numbers
[ 32- 63]: 2936677
[ 64- 127]: 4538344
[ 128- 255]: 939376
[ 256- 511]: 611762
[ 512- 1023]: 452397
[ 1024- 2047]: 4646173
Protocol Breakdown
![[protocol breakdown chart]](200803180130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14124729 (100.00%) 8032176859 (100.00%) 568.66
ip 14095639 ( 99.79%) 8027085163 ( 99.94%) 569.47
tcp 11570075 ( 81.91%) 7525861726 ( 93.70%) 650.46
http(s) 3209153 ( 22.72%) 4446910372 ( 55.36%) 1385.70
http(c) 1750002 ( 12.39%) 159749913 ( 1.99%) 91.29
squid 648525 ( 4.59%) 444302593 ( 5.53%) 685.10
smtp 921522 ( 6.52%) 143598951 ( 1.79%) 155.83
ftp 173584 ( 1.23%) 51962236 ( 0.65%) 299.35
pop3 4354 ( 0.03%) 2055989 ( 0.03%) 472.21
imap 3582 ( 0.03%) 1431875 ( 0.02%) 399.74
telnet 699 ( 0.00%) 43516 ( 0.00%) 62.25
ssh 2109067 ( 14.93%) 604102629 ( 7.52%) 286.43
dns 3797 ( 0.03%) 1894626 ( 0.02%) 498.98
bgp 196 ( 0.00%) 51998 ( 0.00%) 265.30
napster 30 ( 0.00%) 3048 ( 0.00%) 101.60
realaud 36 ( 0.00%) 4557 ( 0.00%) 126.58
rtsp 34297 ( 0.24%) 28140654 ( 0.35%) 820.50
icecast 12507 ( 0.09%) 15230677 ( 0.19%) 1217.77
hotline 13 ( 0.00%) 1386 ( 0.00%) 106.62
other 2698708 ( 19.11%) 1626376526 ( 20.25%) 602.65
udp 1723087 ( 12.20%) 430295689 ( 5.36%) 249.72
dns 1054987 ( 7.47%) 156117025 ( 1.94%) 147.98
realaud 410 ( 0.00%) 29107 ( 0.00%) 70.99
halflif 17 ( 0.00%) 4321 ( 0.00%) 254.18
starcra 48 ( 0.00%) 8811 ( 0.00%) 183.56
everque 33 ( 0.00%) 6543 ( 0.00%) 198.27
unreal 95 ( 0.00%) 10471 ( 0.00%) 110.22
quake 5 ( 0.00%) 611 ( 0.00%) 122.20
cuseeme 2 ( 0.00%) 155 ( 0.00%) 77.50
other 667450 ( 4.73%) 274095640 ( 3.41%) 410.66
icmp 787618 ( 5.58%) 64496266 ( 0.80%) 81.89
ipip 381 ( 0.00%) 49010 ( 0.00%) 128.64
ip6 1073 ( 0.01%) 149441 ( 0.00%) 139.27
other 13405 ( 0.09%) 6233031 ( 0.08%) 464.98
frag 5579 ( 0.04%) 4566274 ( 0.06%) 818.48
ip6 29090 ( 0.21%) 5091696 ( 0.06%) 175.03
tcp6 5248 ( 0.04%) 796330 ( 0.01%) 151.74
http(s) 131 ( 0.00%) 151223 ( 0.00%) 1154.37
http(c) 1309 ( 0.01%) 136246 ( 0.00%) 104.08
smtp 610 ( 0.00%) 170603 ( 0.00%) 279.68
pop3 1165 ( 0.01%) 105210 ( 0.00%) 90.31
bgp 69 ( 0.00%) 7879 ( 0.00%) 114.19
other 1964 ( 0.01%) 225169 ( 0.00%) 114.65
udp6 17666 ( 0.13%) 3442253 ( 0.04%) 194.85
dns 15882 ( 0.11%) 2948450 ( 0.04%) 185.65
starcra 1 ( 0.00%) 516 ( 0.00%) 516.00
other 1783 ( 0.01%) 493287 ( 0.01%) 276.66
icmp6 6146 ( 0.04%) 849033 ( 0.01%) 138.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803180130.dump.gz (373.26 MB)