Traffic Trace Info
DumpFile: -
Id: 200803180330
StartTime: Tue Mar 18 03:30:00 2008
EndTime: Tue Mar 18 03:45:00 2008
TotalTime: 900.31 seconds
TotalCapSize: 772.83MB CapLen: 96 bytes
# of packets: 13866669 (8012.63MB)
AvgRate: 74.64Mbps stddev:15.57M
IP flow (unique src/dst pair) Information
# of flows: 968711 (avg. 14.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.7% 4.3% 1.7% 1.5% 1.4% 1.3% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 547923
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.1% 6.3% 6.3% 6.3% 4.9% 4.8% 4.5% 4.3% 3.9%
# of IPv6 addresses: 1851
Top 10 bandwidth usage (bytes/total in %):
20.1% 16.2% 15.2% 8.3% 6.8% 6.5% 4.9% 4.9% 4.9% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180330.pktlen.png)
detailed numbers
[ 32- 63]: 3091286
[ 64- 127]: 3897094
[ 128- 255]: 834921
[ 256- 511]: 743425
[ 512- 1023]: 325853
[ 1024- 2047]: 4974090
Protocol Breakdown
![[protocol breakdown chart]](200803180330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13866669 (100.00%) 8401849364 (100.00%) 605.90
ip 13832375 ( 99.75%) 8395980500 ( 99.93%) 606.98
tcp 11568789 ( 83.43%) 7900461997 ( 94.03%) 682.91
http(s) 3266374 ( 23.56%) 4524909469 ( 53.86%) 1385.30
http(c) 1565371 ( 11.29%) 134478474 ( 1.60%) 85.91
squid 613730 ( 4.43%) 461597069 ( 5.49%) 752.12
smtp 882240 ( 6.36%) 148001684 ( 1.76%) 167.76
ftp 165422 ( 1.19%) 51397749 ( 0.61%) 310.71
pop3 4634 ( 0.03%) 2639508 ( 0.03%) 569.60
imap 2724 ( 0.02%) 550267 ( 0.01%) 202.01
telnet 3001 ( 0.02%) 193072 ( 0.00%) 64.34
ssh 2282638 ( 16.46%) 1056145571 ( 12.57%) 462.69
dns 3796 ( 0.03%) 2025663 ( 0.02%) 533.63
bgp 187 ( 0.00%) 58043 ( 0.00%) 310.39
napster 41 ( 0.00%) 23674 ( 0.00%) 577.41
realaud 12 ( 0.00%) 1320 ( 0.00%) 110.00
rtsp 23950 ( 0.17%) 19378958 ( 0.23%) 809.14
icecast 12544 ( 0.09%) 15221947 ( 0.18%) 1213.48
hotline 29 ( 0.00%) 4547 ( 0.00%) 156.79
other 2742096 ( 19.77%) 1483834982 ( 17.66%) 541.13
udp 1777399 ( 12.82%) 451896599 ( 5.38%) 254.25
dns 1085562 ( 7.83%) 163319636 ( 1.94%) 150.45
realaud 16 ( 0.00%) 2017 ( 0.00%) 126.06
halflif 27 ( 0.00%) 3087 ( 0.00%) 114.33
starcra 34 ( 0.00%) 6246 ( 0.00%) 183.71
everque 26 ( 0.00%) 3886 ( 0.00%) 149.46
unreal 18 ( 0.00%) 3598 ( 0.00%) 199.89
quake 3056 ( 0.02%) 532847 ( 0.01%) 174.36
cuseeme 2 ( 0.00%) 139 ( 0.00%) 69.50
other 688631 ( 4.97%) 288011855 ( 3.43%) 418.24
icmp 474249 ( 3.42%) 41949585 ( 0.50%) 88.45
ipip 359 ( 0.00%) 43793 ( 0.00%) 121.99
ip6 1089 ( 0.01%) 151998 ( 0.00%) 139.58
other 10490 ( 0.08%) 1476528 ( 0.02%) 140.76
frag 4164 ( 0.03%) 3709331 ( 0.04%) 890.81
ip6 34294 ( 0.25%) 5868864 ( 0.07%) 171.13
tcp6 10184 ( 0.07%) 1449811 ( 0.02%) 142.36
http(s) 182 ( 0.00%) 213819 ( 0.00%) 1174.83
http(c) 1427 ( 0.01%) 138186 ( 0.00%) 96.84
smtp 1121 ( 0.01%) 352252 ( 0.00%) 314.23
pop3 107 ( 0.00%) 10596 ( 0.00%) 99.03
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 96 ( 0.00%) 15811 ( 0.00%) 164.70
other 7244 ( 0.05%) 718512 ( 0.01%) 99.19
udp6 18655 ( 0.13%) 3660771 ( 0.04%) 196.24
dns 16881 ( 0.12%) 3203453 ( 0.04%) 189.77
other 1774 ( 0.01%) 457318 ( 0.01%) 257.79
icmp6 5424 ( 0.04%) 754066 ( 0.01%) 139.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200803180330.dump.gz (351.78 MB)