Traffic Trace Info
DumpFile: -
Id: 200803180415
StartTime: Tue Mar 18 04:15:00 2008
EndTime: Tue Mar 18 04:30:00 2008
TotalTime: 900.47 seconds
TotalCapSize: 657.52MB CapLen: 96 bytes
# of packets: 11565189 (6615.45MB)
AvgRate: 62.13Mbps stddev:10.55M
IP flow (unique src/dst pair) Information
# of flows: 634318 (avg. 18.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.4% 1.7% 1.6% 1.2% 1.1% 1.1% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 345947
Top 10 bandwidth usage (bytes/total in %):
12.1% 10.4% 7.7% 7.2% 5.9% 3.5% 3.5% 3.4% 3.0% 2.1%
# of IPv6 addresses: 1879
Top 10 bandwidth usage (bytes/total in %):
21.1% 16.5% 11.0% 7.4% 7.0% 6.7% 6.4% 5.5% 5.5% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180415.pktlen.png)
detailed numbers
[ 32- 63]: 2058141
[ 64- 127]: 3996685
[ 128- 255]: 805732
[ 256- 511]: 344981
[ 512- 1023]: 226415
[ 1024- 2047]: 4133235
Protocol Breakdown
![[protocol breakdown chart]](200803180415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11565189 (100.00%) 6936800608 (100.00%) 599.80
ip 11530732 ( 99.70%) 6931250546 ( 99.92%) 601.11
tcp 9340110 ( 80.76%) 6498999480 ( 93.69%) 695.82
http(s) 2832354 ( 24.49%) 3897773958 ( 56.19%) 1376.16
http(c) 1347627 ( 11.65%) 139395369 ( 2.01%) 103.44
squid 476958 ( 4.12%) 345178217 ( 4.98%) 723.71
smtp 702320 ( 6.07%) 125575961 ( 1.81%) 178.80
ftp 159953 ( 1.38%) 48008983 ( 0.69%) 300.14
pop3 3795 ( 0.03%) 2476197 ( 0.04%) 652.49
imap 2769 ( 0.02%) 513554 ( 0.01%) 185.47
telnet 2403 ( 0.02%) 153836 ( 0.00%) 64.02
ssh 1355769 ( 11.72%) 542265328 ( 7.82%) 399.97
dns 8780 ( 0.08%) 10460045 ( 0.15%) 1191.35
bgp 209 ( 0.00%) 58687 ( 0.00%) 280.80
napster 60 ( 0.00%) 5589 ( 0.00%) 93.15
realaud 16 ( 0.00%) 1969 ( 0.00%) 123.06
rtsp 30081 ( 0.26%) 25330772 ( 0.37%) 842.09
icecast 14729 ( 0.13%) 18416537 ( 0.27%) 1250.36
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2402274 ( 20.77%) 1343383098 ( 19.37%) 559.21
udp 1589458 ( 13.74%) 381137845 ( 5.49%) 239.79
dns 986450 ( 8.53%) 146306684 ( 2.11%) 148.32
realaud 41 ( 0.00%) 5206 ( 0.00%) 126.98
halflif 13 ( 0.00%) 1916 ( 0.00%) 147.38
starcra 36 ( 0.00%) 5664 ( 0.00%) 157.33
everque 27 ( 0.00%) 6764 ( 0.00%) 250.52
unreal 28 ( 0.00%) 4731 ( 0.00%) 168.96
quake 14 ( 0.00%) 3665 ( 0.00%) 261.79
cuseeme 1 ( 0.00%) 69 ( 0.00%) 69.00
other 602813 ( 5.21%) 234775866 ( 3.38%) 389.47
icmp 589151 ( 5.09%) 49342362 ( 0.71%) 83.75
ipip 306 ( 0.00%) 39006 ( 0.00%) 127.47
ip6 1047 ( 0.01%) 143123 ( 0.00%) 136.70
other 10660 ( 0.09%) 1588730 ( 0.02%) 149.04
frag 3834 ( 0.03%) 3164948 ( 0.05%) 825.50
ip6 34457 ( 0.30%) 5550062 ( 0.08%) 161.07
tcp6 12289 ( 0.11%) 1383065 ( 0.02%) 112.54
http(s) 51 ( 0.00%) 59240 ( 0.00%) 1161.57
http(c) 2238 ( 0.02%) 209752 ( 0.00%) 93.72
smtp 4699 ( 0.04%) 566842 ( 0.01%) 120.63
pop3 66 ( 0.00%) 6467 ( 0.00%) 97.98
bgp 77 ( 0.00%) 9082 ( 0.00%) 117.95
other 5158 ( 0.04%) 531682 ( 0.01%) 103.08
udp6 17338 ( 0.15%) 3505451 ( 0.05%) 202.18
dns 15385 ( 0.13%) 3015474 ( 0.04%) 196.00
other 1953 ( 0.02%) 489977 ( 0.01%) 250.88
icmp6 4800 ( 0.04%) 657466 ( 0.01%) 136.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803180415.dump.gz (302.40 MB)