Traffic Trace Info
DumpFile: -
Id: 200803180445
StartTime: Tue Mar 18 04:45:00 2008
EndTime: Tue Mar 18 05:00:00 2008
TotalTime: 900.34 seconds
TotalCapSize: 658.54MB CapLen: 96 bytes
# of packets: 11680730 (6489.70MB)
AvgRate: 60.49Mbps stddev:12.20M
IP flow (unique src/dst pair) Information
# of flows: 646283 (avg. 18.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.5% 1.4% 1.3% 1.0% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 332406
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.2% 8.0% 6.0% 5.9% 5.0% 2.9% 2.8% 2.6% 2.6%
# of IPv6 addresses: 1888
Top 10 bandwidth usage (bytes/total in %):
15.9% 13.2% 11.2% 9.3% 8.1% 5.6% 4.6% 4.5% 4.2% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180445.pktlen.png)
detailed numbers
[ 32- 63]: 2048361
[ 64- 127]: 4135883
[ 128- 255]: 886721
[ 256- 511]: 359930
[ 512- 1023]: 245970
[ 1024- 2047]: 4003865
Protocol Breakdown
![[protocol breakdown chart]](200803180445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11680730 (100.00%) 6804939557 (100.00%) 582.58
ip 11656068 ( 99.79%) 6800775902 ( 99.94%) 583.45
tcp 9195229 ( 78.72%) 6302877917 ( 92.62%) 685.45
http(s) 2571272 ( 22.01%) 3515249061 ( 51.66%) 1367.12
http(c) 1251421 ( 10.71%) 129487602 ( 1.90%) 103.47
squid 517878 ( 4.43%) 417577700 ( 6.14%) 806.32
smtp 868861 ( 7.44%) 126759642 ( 1.86%) 145.89
ftp 167055 ( 1.43%) 47147547 ( 0.69%) 282.23
pop3 4028 ( 0.03%) 2185360 ( 0.03%) 542.54
imap 2805 ( 0.02%) 536880 ( 0.01%) 191.40
telnet 2807 ( 0.02%) 180162 ( 0.00%) 64.18
ssh 1294404 ( 11.08%) 531324350 ( 7.81%) 410.48
dns 1886 ( 0.02%) 153373 ( 0.00%) 81.32
bgp 190 ( 0.00%) 52560 ( 0.00%) 276.63
napster 13 ( 0.00%) 1386 ( 0.00%) 106.62
realaud 34 ( 0.00%) 4361 ( 0.00%) 128.26
rtsp 32545 ( 0.28%) 27795970 ( 0.41%) 854.08
icecast 12655 ( 0.11%) 15239460 ( 0.22%) 1204.22
hotline 13 ( 0.00%) 1402 ( 0.00%) 107.85
other 2467359 ( 21.12%) 1489180921 ( 21.88%) 603.55
udp 1896035 ( 16.23%) 449123822 ( 6.60%) 236.88
dns 1221079 ( 10.45%) 179472887 ( 2.64%) 146.98
realaud 19 ( 0.00%) 2382 ( 0.00%) 125.37
halflif 21 ( 0.00%) 3310 ( 0.00%) 157.62
starcra 33 ( 0.00%) 6186 ( 0.00%) 187.45
everque 28 ( 0.00%) 5388 ( 0.00%) 192.43
unreal 11 ( 0.00%) 2366 ( 0.00%) 215.09
quake 12 ( 0.00%) 1074 ( 0.00%) 89.50
cuseeme 3 ( 0.00%) 276 ( 0.00%) 92.00
other 674751 ( 5.78%) 269602435 ( 3.96%) 399.56
icmp 553482 ( 4.74%) 47192985 ( 0.69%) 85.27
ipip 290 ( 0.00%) 35928 ( 0.00%) 123.89
ip6 1033 ( 0.01%) 139496 ( 0.00%) 135.04
other 9999 ( 0.09%) 1405754 ( 0.02%) 140.59
frag 9797 ( 0.08%) 7894266 ( 0.12%) 805.78
ip6 24662 ( 0.21%) 4163655 ( 0.06%) 168.83
tcp6 4098 ( 0.04%) 615460 ( 0.01%) 150.19
http(s) 4 ( 0.00%) 526 ( 0.00%) 131.50
http(c) 1383 ( 0.01%) 138347 ( 0.00%) 100.03
smtp 535 ( 0.00%) 231130 ( 0.00%) 432.02
pop3 36 ( 0.00%) 3318 ( 0.00%) 92.17
dns 6 ( 0.00%) 2593 ( 0.00%) 432.17
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 2071 ( 0.02%) 232997 ( 0.00%) 112.50
udp6 15597 ( 0.13%) 2868024 ( 0.04%) 183.88
dns 13644 ( 0.12%) 2342978 ( 0.03%) 171.72
other 1953 ( 0.02%) 525046 ( 0.01%) 268.84
icmp6 4934 ( 0.04%) 674071 ( 0.01%) 136.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 1884 ( 0.00%) 942.00
tcpdump file: 200803180445.dump.gz (308.37 MB)