Traffic Trace Info
DumpFile: -
Id: 200803180515
StartTime: Tue Mar 18 05:15:00 2008
EndTime: Tue Mar 18 05:30:01 2008
TotalTime: 900.69 seconds
TotalCapSize: 669.38MB CapLen: 96 bytes
# of packets: 11991396 (6082.01MB)
AvgRate: 56.65Mbps stddev:10.34M
IP flow (unique src/dst pair) Information
# of flows: 780542 (avg. 15.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.4% 1.3% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 431618
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.9% 8.6% 6.3% 5.1% 5.0% 3.8% 3.7% 3.0% 2.9%
# of IPv6 addresses: 1868
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.3% 8.9% 7.5% 6.9% 6.9% 6.7% 6.1% 4.3% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180515.pktlen.png)
detailed numbers
[ 32- 63]: 2382682
[ 64- 127]: 4237358
[ 128- 255]: 1108791
[ 256- 511]: 386548
[ 512- 1023]: 201385
[ 1024- 2047]: 3674632
Protocol Breakdown
![[protocol breakdown chart]](200803180515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11991396 (100.00%) 6377445070 (100.00%) 531.84
ip 11967163 ( 99.80%) 6373143746 ( 99.93%) 532.55
tcp 8585426 ( 71.60%) 5762447116 ( 90.36%) 671.19
http(s) 2263868 ( 18.88%) 3103928430 ( 48.67%) 1371.07
http(c) 1130646 ( 9.43%) 107832287 ( 1.69%) 95.37
squid 493121 ( 4.11%) 374780014 ( 5.88%) 760.02
smtp 888420 ( 7.41%) 121387095 ( 1.90%) 136.63
ftp 161270 ( 1.34%) 46403429 ( 0.73%) 287.74
pop3 6567 ( 0.05%) 4163210 ( 0.07%) 633.96
imap 2405 ( 0.02%) 504749 ( 0.01%) 209.87
telnet 2451 ( 0.02%) 156937 ( 0.00%) 64.03
ssh 1380263 ( 11.51%) 532860767 ( 8.36%) 386.06
dns 1915 ( 0.02%) 163528 ( 0.00%) 85.39
bgp 241 ( 0.00%) 80349 ( 0.00%) 333.40
napster 18 ( 0.00%) 1735 ( 0.00%) 96.39
realaud 25 ( 0.00%) 3508 ( 0.00%) 140.32
rtsp 32688 ( 0.27%) 27991952 ( 0.44%) 856.34
icecast 12601 ( 0.11%) 15234199 ( 0.24%) 1208.97
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 2208925 ( 18.42%) 1426954801 ( 22.38%) 646.00
udp 2622159 ( 21.87%) 544443803 ( 8.54%) 207.63
dns 1563038 ( 13.03%) 217538842 ( 3.41%) 139.18
realaud 35 ( 0.00%) 4057 ( 0.00%) 115.91
halflif 35 ( 0.00%) 5404 ( 0.00%) 154.40
starcra 27 ( 0.00%) 4435 ( 0.00%) 164.26
everque 29 ( 0.00%) 4110 ( 0.00%) 141.72
unreal 13 ( 0.00%) 2221 ( 0.00%) 170.85
quake 14 ( 0.00%) 2578 ( 0.00%) 184.14
cuseeme 6 ( 0.00%) 499 ( 0.00%) 83.17
other 1058936 ( 8.83%) 326860356 ( 5.13%) 308.67
icmp 748706 ( 6.24%) 64733213 ( 1.02%) 86.46
ipip 274 ( 0.00%) 32804 ( 0.00%) 119.72
ip6 1049 ( 0.01%) 141171 ( 0.00%) 134.58
other 9549 ( 0.08%) 1345639 ( 0.02%) 140.92
frag 3715 ( 0.03%) 3081893 ( 0.05%) 829.58
ip6 24233 ( 0.20%) 4301324 ( 0.07%) 177.50
tcp6 4310 ( 0.04%) 575461 ( 0.01%) 133.52
http(s) 43 ( 0.00%) 56840 ( 0.00%) 1321.86
http(c) 1374 ( 0.01%) 146570 ( 0.00%) 106.67
smtp 440 ( 0.00%) 98677 ( 0.00%) 224.27
pop3 40 ( 0.00%) 3536 ( 0.00%) 88.40
dns 8 ( 0.00%) 1612 ( 0.00%) 201.50
bgp 92 ( 0.00%) 13858 ( 0.00%) 150.63
other 2313 ( 0.02%) 254368 ( 0.00%) 109.97
udp6 15021 ( 0.13%) 3057422 ( 0.05%) 203.54
dns 13026 ( 0.11%) 2501376 ( 0.04%) 192.03
other 1995 ( 0.02%) 556046 ( 0.01%) 278.72
icmp6 4872 ( 0.04%) 664361 ( 0.01%) 136.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803180515.dump.gz (312.51 MB)