Traffic Trace Info
DumpFile: -
Id: 200803180345
StartTime: Tue Mar 18 03:45:00 2008
EndTime: Tue Mar 18 04:00:01 2008
TotalTime: 900.38 seconds
TotalCapSize: 701.89MB CapLen: 96 bytes
# of packets: 12581132 (7405.27MB)
AvgRate: 68.99Mbps stddev:12.68M
IP flow (unique src/dst pair) Information
# of flows: 721611 (avg. 17.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 6.1% 5.0% 1.6% 1.0% 0.9% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 386613
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.5% 6.7% 6.7% 6.5% 6.2% 6.2% 5.2% 3.2% 2.9%
# of IPv6 addresses: 2296
Top 10 bandwidth usage (bytes/total in %):
25.3% 19.2% 14.5% 7.5% 7.4% 7.1% 3.9% 3.6% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180345.pktlen.png)
detailed numbers
[ 32- 63]: 2599148
[ 64- 127]: 3601786
[ 128- 255]: 791351
[ 256- 511]: 667586
[ 512- 1023]: 307941
[ 1024- 2047]: 4613320
Protocol Breakdown
![[protocol breakdown chart]](200803180345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12581132 (100.00%) 7764993029 (100.00%) 617.19
ip 12551553 ( 99.76%) 7759755127 ( 99.93%) 618.23
tcp 10430517 ( 82.91%) 7292162202 ( 93.91%) 699.12
http(s) 3159816 ( 25.12%) 4345696583 ( 55.97%) 1375.30
http(c) 1517048 ( 12.06%) 133103506 ( 1.71%) 87.74
squid 328965 ( 2.61%) 190802847 ( 2.46%) 580.01
smtp 701753 ( 5.58%) 102622887 ( 1.32%) 146.24
ftp 157747 ( 1.25%) 47656337 ( 0.61%) 302.11
pop3 4673 ( 0.04%) 2774652 ( 0.04%) 593.76
imap 3351 ( 0.03%) 803636 ( 0.01%) 239.82
telnet 3408 ( 0.03%) 218844 ( 0.00%) 64.21
ssh 2241498 ( 17.82%) 1050592084 ( 13.53%) 468.70
dns 81724 ( 0.65%) 120166320 ( 1.55%) 1470.39
bgp 211 ( 0.00%) 65118 ( 0.00%) 308.62
napster 33 ( 0.00%) 4342 ( 0.00%) 131.58
realaud 20 ( 0.00%) 2662 ( 0.00%) 133.10
rtsp 28702 ( 0.23%) 23761497 ( 0.31%) 827.87
icecast 12991 ( 0.10%) 15493492 ( 0.20%) 1192.63
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2188563 ( 17.40%) 1258395955 ( 16.21%) 574.99
udp 1662824 ( 13.22%) 426751069 ( 5.50%) 256.64
dns 986422 ( 7.84%) 147525708 ( 1.90%) 149.56
realaud 41 ( 0.00%) 4997 ( 0.00%) 121.88
halflif 37 ( 0.00%) 3611 ( 0.00%) 97.59
starcra 37 ( 0.00%) 6384 ( 0.00%) 172.54
everque 24 ( 0.00%) 3804 ( 0.00%) 158.50
unreal 14 ( 0.00%) 2075 ( 0.00%) 148.21
quake 18 ( 0.00%) 5520 ( 0.00%) 306.67
cuseeme 4 ( 0.00%) 355 ( 0.00%) 88.75
other 676178 ( 5.37%) 279154630 ( 3.60%) 412.84
icmp 447194 ( 3.55%) 39298732 ( 0.51%) 87.88
ipip 320 ( 0.00%) 41080 ( 0.00%) 128.38
ip6 1054 ( 0.01%) 144548 ( 0.00%) 137.14
other 9644 ( 0.08%) 1357496 ( 0.02%) 140.76
frag 2638 ( 0.02%) 2239716 ( 0.03%) 849.02
ip6 29579 ( 0.24%) 5237902 ( 0.07%) 177.08
tcp6 5131 ( 0.04%) 638257 ( 0.01%) 124.39
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1291 ( 0.01%) 125785 ( 0.00%) 97.43
smtp 588 ( 0.00%) 157376 ( 0.00%) 267.65
pop3 91 ( 0.00%) 8643 ( 0.00%) 94.98
bgp 92 ( 0.00%) 13907 ( 0.00%) 151.16
other 3064 ( 0.02%) 331934 ( 0.00%) 108.33
udp6 19339 ( 0.15%) 3888098 ( 0.05%) 201.05
dns 16619 ( 0.13%) 2933259 ( 0.04%) 176.50
other 2720 ( 0.02%) 954839 ( 0.01%) 351.04
icmp6 5073 ( 0.04%) 702191 ( 0.01%) 138.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5276 ( 0.00%) 879.33
tcpdump file: 200803180345.dump.gz (320.51 MB)