Traffic Trace Info
DumpFile: -
Id: 200803180500
StartTime: Tue Mar 18 05:00:00 2008
EndTime: Tue Mar 18 05:15:00 2008
TotalTime: 899.91 seconds
TotalCapSize: 666.76MB CapLen: 96 bytes
# of packets: 11871636 (6403.29MB)
AvgRate: 59.70Mbps stddev:12.83M
IP flow (unique src/dst pair) Information
# of flows: 802329 (avg. 14.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.5% 1.4% 1.2% 1.2% 1.2% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 425657
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.7% 7.8% 6.9% 5.9% 5.6% 3.6% 2.6% 2.5% 2.5%
# of IPv6 addresses: 2181
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.8% 8.1% 7.9% 6.8% 6.4% 5.5% 5.2% 4.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180500.pktlen.png)
detailed numbers
[ 32- 63]: 1947480
[ 64- 127]: 4124559
[ 128- 255]: 1184795
[ 256- 511]: 531320
[ 512- 1023]: 200411
[ 1024- 2047]: 3883071
Protocol Breakdown
![[protocol breakdown chart]](200803180500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11871636 (100.00%) 6714334708 (100.00%) 565.58
ip 11842509 ( 99.75%) 6709196870 ( 99.92%) 566.54
tcp 8906817 ( 75.03%) 6080750369 ( 90.56%) 682.71
http(s) 2608261 ( 21.97%) 3597380847 ( 53.58%) 1379.23
http(c) 1241736 ( 10.46%) 114678247 ( 1.71%) 92.35
squid 374101 ( 3.15%) 254720872 ( 3.79%) 680.89
smtp 790102 ( 6.66%) 112203551 ( 1.67%) 142.01
ftp 167806 ( 1.41%) 47405849 ( 0.71%) 282.50
pop3 10500 ( 0.09%) 8542854 ( 0.13%) 813.61
imap 2689 ( 0.02%) 530182 ( 0.01%) 197.17
telnet 2604 ( 0.02%) 167110 ( 0.00%) 64.17
ssh 1300226 ( 10.95%) 521951718 ( 7.77%) 401.43
dns 1917 ( 0.02%) 188995 ( 0.00%) 98.59
bgp 190 ( 0.00%) 51219 ( 0.00%) 269.57
napster 34 ( 0.00%) 3382 ( 0.00%) 99.47
realaud 13 ( 0.00%) 1386 ( 0.00%) 106.62
rtsp 32773 ( 0.28%) 27959942 ( 0.42%) 853.14
icecast 12625 ( 0.11%) 15226619 ( 0.23%) 1206.07
other 2361237 ( 19.89%) 1379737416 ( 20.55%) 584.33
udp 2499355 ( 21.05%) 588997678 ( 8.77%) 235.66
dns 1703150 ( 14.35%) 234462017 ( 3.49%) 137.66
realaud 242 ( 0.00%) 16510 ( 0.00%) 68.22
halflif 14 ( 0.00%) 1791 ( 0.00%) 127.93
starcra 46 ( 0.00%) 8707 ( 0.00%) 189.28
everque 41 ( 0.00%) 6959 ( 0.00%) 169.73
unreal 22 ( 0.00%) 3849 ( 0.00%) 174.95
quake 12 ( 0.00%) 1860 ( 0.00%) 155.00
cuseeme 3 ( 0.00%) 222 ( 0.00%) 74.00
other 795811 ( 6.70%) 354485959 ( 5.28%) 445.44
icmp 424971 ( 3.58%) 37853988 ( 0.56%) 89.07
ipip 368 ( 0.00%) 46880 ( 0.00%) 127.39
ip6 1006 ( 0.01%) 138892 ( 0.00%) 138.06
other 9992 ( 0.08%) 1409063 ( 0.02%) 141.02
frag 5074 ( 0.04%) 4123931 ( 0.06%) 812.76
ip6 29127 ( 0.25%) 5137838 ( 0.08%) 176.39
tcp6 4687 ( 0.04%) 761732 ( 0.01%) 162.52
http(s) 133 ( 0.00%) 159370 ( 0.00%) 1198.27
http(c) 1503 ( 0.01%) 154623 ( 0.00%) 102.88
smtp 623 ( 0.01%) 177670 ( 0.00%) 285.18
pop3 58 ( 0.00%) 5324 ( 0.00%) 91.79
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 83 ( 0.00%) 10982 ( 0.00%) 132.31
other 2286 ( 0.02%) 253689 ( 0.00%) 110.98
udp6 19009 ( 0.16%) 3614882 ( 0.05%) 190.17
dns 16659 ( 0.14%) 2882055 ( 0.04%) 173.00
other 2350 ( 0.02%) 732827 ( 0.01%) 311.84
icmp6 5391 ( 0.05%) 748028 ( 0.01%) 138.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 9116 ( 0.00%) 911.60
tcpdump file: 200803180500.dump.gz (315.81 MB)