Traffic Trace Info
DumpFile: -
Id: 200803180400
StartTime: Tue Mar 18 04:00:01 2008
EndTime: Tue Mar 18 04:15:00 2008
TotalTime: 899.31 seconds
TotalCapSize: 680.70MB CapLen: 96 bytes
# of packets: 12090112 (7136.39MB)
AvgRate: 66.57Mbps stddev:13.75M
IP flow (unique src/dst pair) Information
# of flows: 635416 (avg. 19.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 5.3% 2.9% 2.1% 1.3% 1.2% 1.2% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 337349
Top 10 bandwidth usage (bytes/total in %):
9.6% 9.0% 6.8% 5.7% 5.7% 5.4% 5.2% 3.6% 3.0% 3.0%
# of IPv6 addresses: 1784
Top 10 bandwidth usage (bytes/total in %):
65.8% 65.7% 7.5% 6.0% 3.4% 3.0% 2.3% 1.7% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180400.pktlen.png)
detailed numbers
[ 32- 63]: 2324421
[ 64- 127]: 3768132
[ 128- 255]: 805273
[ 256- 511]: 449502
[ 512- 1023]: 265224
[ 1024- 2047]: 4477560
Protocol Breakdown
![[protocol breakdown chart]](200803180400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12090112 (100.00%) 7483045597 (100.00%) 618.94
ip 12055198 ( 99.71%) 7469385772 ( 99.82%) 619.60
tcp 9954627 ( 82.34%) 7028546468 ( 93.93%) 706.06
http(s) 3157213 ( 26.11%) 4287624287 ( 57.30%) 1358.04
http(c) 1428653 ( 11.82%) 140034954 ( 1.87%) 98.02
squid 488995 ( 4.04%) 351823587 ( 4.70%) 719.48
smtp 757023 ( 6.26%) 147582105 ( 1.97%) 194.95
ftp 155383 ( 1.29%) 44961957 ( 0.60%) 289.36
pop3 5755 ( 0.05%) 3617120 ( 0.05%) 628.52
imap 3133 ( 0.03%) 607760 ( 0.01%) 193.99
telnet 2957 ( 0.02%) 189824 ( 0.00%) 64.19
ssh 1709338 ( 14.14%) 756090155 ( 10.10%) 442.33
dns 2353 ( 0.02%) 184098 ( 0.00%) 78.24
bgp 198 ( 0.00%) 53514 ( 0.00%) 270.27
napster 48 ( 0.00%) 18710 ( 0.00%) 389.79
realaud 7 ( 0.00%) 948 ( 0.00%) 135.43
rtsp 1831 ( 0.02%) 216563 ( 0.00%) 118.28
icecast 12896 ( 0.11%) 15595620 ( 0.21%) 1209.34
hotline 10 ( 0.00%) 1131 ( 0.00%) 113.10
other 2228831 ( 18.44%) 1279943955 ( 17.10%) 574.27
udp 1643552 ( 13.59%) 399874297 ( 5.34%) 243.30
dns 1047151 ( 8.66%) 154082601 ( 2.06%) 147.14
realaud 29 ( 0.00%) 4090 ( 0.00%) 141.03
halflif 17 ( 0.00%) 1699 ( 0.00%) 99.94
starcra 45 ( 0.00%) 8196 ( 0.00%) 182.13
everque 20 ( 0.00%) 2891 ( 0.00%) 144.55
unreal 10 ( 0.00%) 3368 ( 0.00%) 336.80
quake 9 ( 0.00%) 1619 ( 0.00%) 179.89
other 596220 ( 4.93%) 245744582 ( 3.28%) 412.17
icmp 445659 ( 3.69%) 39370766 ( 0.53%) 88.34
ipip 365 ( 0.00%) 45042 ( 0.00%) 123.40
ip6 1037 ( 0.01%) 142350 ( 0.00%) 137.27
other 9958 ( 0.08%) 1406849 ( 0.02%) 141.28
frag 1799 ( 0.01%) 1534968 ( 0.02%) 853.23
ip6 34914 ( 0.29%) 13659825 ( 0.18%) 391.24
tcp6 12058 ( 0.10%) 9704154 ( 0.13%) 804.79
http(s) 1 ( 0.00%) 74 ( 0.00%) 74.00
http(c) 1311 ( 0.01%) 126742 ( 0.00%) 96.68
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 6603 ( 0.05%) 9144944 ( 0.12%) 1384.97
pop3 72 ( 0.00%) 7352 ( 0.00%) 102.11
bgp 89 ( 0.00%) 10462 ( 0.00%) 117.55
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3979 ( 0.03%) 414358 ( 0.01%) 104.14
udp6 17646 ( 0.15%) 3238603 ( 0.04%) 183.53
dns 15819 ( 0.13%) 2828458 ( 0.04%) 178.80
other 1827 ( 0.02%) 410145 ( 0.01%) 224.49
icmp6 5178 ( 0.04%) 711077 ( 0.01%) 137.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1911 ( 0.00%) 955.50
tcpdump file: 200803180400.dump.gz (313.15 MB)