Traffic Trace Info
DumpFile: -
Id: 200803180430
StartTime: Tue Mar 18 04:30:00 2008
EndTime: Tue Mar 18 04:45:00 2008
TotalTime: 899.52 seconds
TotalCapSize: 678.77MB CapLen: 96 bytes
# of packets: 12047757 (6825.14MB)
AvgRate: 63.66Mbps stddev:12.02M
IP flow (unique src/dst pair) Information
# of flows: 652116 (avg. 18.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.4% 2.2% 1.9% 1.4% 1.2% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 341518
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.5% 7.2% 5.6% 5.6% 5.6% 5.6% 4.2% 2.7% 2.4%
# of IPv6 addresses: 2011
Top 10 bandwidth usage (bytes/total in %):
27.8% 21.2% 8.8% 8.4% 6.6% 5.2% 4.3% 3.9% 3.9% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180430.pktlen.png)
detailed numbers
[ 32- 63]: 2191960
[ 64- 127]: 4104324
[ 128- 255]: 873696
[ 256- 511]: 393356
[ 512- 1023]: 246405
[ 1024- 2047]: 4238016
Protocol Breakdown
![[protocol breakdown chart]](200803180430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12047757 (100.00%) 7156682711 (100.00%) 594.03
ip 12014027 ( 99.72%) 7150930545 ( 99.92%) 595.22
tcp 9613523 ( 79.80%) 6614093290 ( 92.42%) 688.00
http(s) 2852404 ( 23.68%) 3911416025 ( 54.65%) 1371.27
http(c) 1303426 ( 10.82%) 124657371 ( 1.74%) 95.64
squid 573490 ( 4.76%) 455496138 ( 6.36%) 794.25
smtp 816853 ( 6.78%) 134592652 ( 1.88%) 164.77
ftp 195117 ( 1.62%) 77070434 ( 1.08%) 395.00
pop3 6342 ( 0.05%) 3667693 ( 0.05%) 578.32
imap 2527 ( 0.02%) 498402 ( 0.01%) 197.23
telnet 2782 ( 0.02%) 178406 ( 0.00%) 64.13
ssh 1368803 ( 11.36%) 536885090 ( 7.50%) 392.23
dns 3882 ( 0.03%) 1882504 ( 0.03%) 484.93
bgp 171 ( 0.00%) 48510 ( 0.00%) 283.68
realaud 32 ( 0.00%) 4176 ( 0.00%) 130.50
rtsp 33379 ( 0.28%) 28118399 ( 0.39%) 842.40
icecast 12624 ( 0.10%) 15219658 ( 0.21%) 1205.61
hotline 1 ( 0.00%) 78 ( 0.00%) 78.00
other 2441689 ( 20.27%) 1324357694 ( 18.51%) 542.39
udp 1818686 ( 15.10%) 487034206 ( 6.81%) 267.79
dns 1115919 ( 9.26%) 166628775 ( 2.33%) 149.32
realaud 62 ( 0.00%) 18586 ( 0.00%) 299.77
halflif 25 ( 0.00%) 4171 ( 0.00%) 166.84
starcra 22 ( 0.00%) 5452 ( 0.00%) 247.82
everque 14 ( 0.00%) 1577 ( 0.00%) 112.64
unreal 8 ( 0.00%) 1554 ( 0.00%) 194.25
quake 10 ( 0.00%) 1870 ( 0.00%) 187.00
cuseeme 5 ( 0.00%) 393 ( 0.00%) 78.60
other 702553 ( 5.83%) 320341152 ( 4.48%) 455.97
icmp 570202 ( 4.73%) 48170727 ( 0.67%) 84.48
ipip 370 ( 0.00%) 45502 ( 0.00%) 122.98
ip6 1113 ( 0.01%) 157244 ( 0.00%) 141.28
other 10133 ( 0.08%) 1429576 ( 0.02%) 141.08
frag 7599 ( 0.06%) 6128102 ( 0.09%) 806.44
ip6 33730 ( 0.28%) 5752166 ( 0.08%) 170.54
tcp6 7769 ( 0.06%) 996429 ( 0.01%) 128.26
http(s) 131 ( 0.00%) 151223 ( 0.00%) 1154.37
http(c) 1200 ( 0.01%) 121390 ( 0.00%) 101.16
smtp 464 ( 0.00%) 153910 ( 0.00%) 331.70
ftp 19 ( 0.00%) 1591 ( 0.00%) 83.74
pop3 36 ( 0.00%) 3312 ( 0.00%) 92.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 71 ( 0.00%) 7794 ( 0.00%) 109.77
other 5841 ( 0.05%) 556574 ( 0.01%) 95.29
udp6 20455 ( 0.17%) 3994210 ( 0.06%) 195.27
dns 18369 ( 0.15%) 3373504 ( 0.05%) 183.65
other 2086 ( 0.02%) 620706 ( 0.01%) 297.56
icmp6 5472 ( 0.05%) 753746 ( 0.01%) 137.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3701 ( 0.00%) 925.25
tcpdump file: 200803180430.dump.gz (315.49 MB)