Traffic Trace Info
DumpFile: -
Id: 200803180215
StartTime: Tue Mar 18 02:15:00 2008
EndTime: Tue Mar 18 02:30:00 2008
TotalTime: 900.45 seconds
TotalCapSize: 731.03MB CapLen: 96 bytes
# of packets: 13197433 (6621.77MB)
AvgRate: 61.69Mbps stddev:11.08M
IP flow (unique src/dst pair) Information
# of flows: 804269 (avg. 16.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 3.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 468594
Top 10 bandwidth usage (bytes/total in %):
13.3% 11.0% 7.7% 7.7% 4.5% 3.5% 3.4% 2.7% 2.5% 2.5%
# of IPv6 addresses: 2173
Top 10 bandwidth usage (bytes/total in %):
17.5% 14.2% 9.4% 7.8% 5.9% 5.9% 5.4% 5.3% 5.2% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180215.pktlen.png)
detailed numbers
[ 32- 63]: 2948328
[ 64- 127]: 4275207
[ 128- 255]: 958410
[ 256- 511]: 701860
[ 512- 1023]: 372813
[ 1024- 2047]: 3940815
Protocol Breakdown
![[protocol breakdown chart]](200803180215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13197433 (100.00%) 6943424087 (100.00%) 526.12
ip 13170318 ( 99.79%) 6938277721 ( 99.93%) 526.81
tcp 10287467 ( 77.95%) 6433266272 ( 92.65%) 625.35
http(s) 2707540 ( 20.52%) 3684919997 ( 53.07%) 1360.98
http(c) 1506875 ( 11.42%) 137762422 ( 1.98%) 91.42
squid 480958 ( 3.64%) 320519797 ( 4.62%) 666.42
smtp 989034 ( 7.49%) 165578787 ( 2.38%) 167.41
ftp 154952 ( 1.17%) 42214561 ( 0.61%) 272.44
pop3 5104 ( 0.04%) 2471808 ( 0.04%) 484.29
imap 2998 ( 0.02%) 880311 ( 0.01%) 293.63
telnet 2558 ( 0.02%) 164460 ( 0.00%) 64.29
ssh 2096582 ( 15.89%) 730209791 ( 10.52%) 348.29
dns 8843 ( 0.07%) 10682164 ( 0.15%) 1207.98
bgp 187 ( 0.00%) 54454 ( 0.00%) 291.20
napster 15 ( 0.00%) 1518 ( 0.00%) 101.20
realaud 28 ( 0.00%) 3861 ( 0.00%) 137.89
rtsp 32670 ( 0.25%) 45572885 ( 0.66%) 1394.95
icecast 12716 ( 0.10%) 15239720 ( 0.22%) 1198.47
hotline 21 ( 0.00%) 2347 ( 0.00%) 111.76
other 2286386 ( 17.32%) 1276987389 ( 18.39%) 558.52
udp 1841275 ( 13.95%) 421709458 ( 6.07%) 229.03
dns 1104274 ( 8.37%) 164496896 ( 2.37%) 148.96
realaud 1874 ( 0.01%) 114451 ( 0.00%) 61.07
halflif 22 ( 0.00%) 2477 ( 0.00%) 112.59
starcra 24 ( 0.00%) 4991 ( 0.00%) 207.96
everque 20 ( 0.00%) 2811 ( 0.00%) 140.55
unreal 17 ( 0.00%) 2101 ( 0.00%) 123.59
quake 14 ( 0.00%) 2375 ( 0.00%) 169.64
cuseeme 4 ( 0.00%) 310 ( 0.00%) 77.50
other 734964 ( 5.57%) 257044695 ( 3.70%) 349.74
icmp 1029603 ( 7.80%) 81393313 ( 1.17%) 79.05
ipip 294 ( 0.00%) 36148 ( 0.00%) 122.95
ip6 1056 ( 0.01%) 145760 ( 0.00%) 138.03
other 10623 ( 0.08%) 1726770 ( 0.02%) 162.55
frag 2274 ( 0.02%) 2012062 ( 0.03%) 884.81
ip6 27115 ( 0.21%) 5146366 ( 0.07%) 189.80
tcp6 4904 ( 0.04%) 928644 ( 0.01%) 189.36
http(s) 43 ( 0.00%) 56840 ( 0.00%) 1321.86
http(c) 1767 ( 0.01%) 220721 ( 0.00%) 124.91
smtp 1058 ( 0.01%) 413780 ( 0.01%) 391.10
pop3 64 ( 0.00%) 6280 ( 0.00%) 98.12
bgp 91 ( 0.00%) 13907 ( 0.00%) 152.82
other 1881 ( 0.01%) 217116 ( 0.00%) 115.43
udp6 17151 ( 0.13%) 3532565 ( 0.05%) 205.97
dns 14840 ( 0.11%) 2814821 ( 0.04%) 189.68
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
other 2309 ( 0.02%) 717031 ( 0.01%) 310.54
icmp6 5029 ( 0.04%) 680941 ( 0.01%) 135.40
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200803180215.dump.gz (344.34 MB)