Traffic Trace Info
DumpFile: -
Id: 200803180530
StartTime: Tue Mar 18 05:30:01 2008
EndTime: Tue Mar 18 05:45:00 2008
TotalTime: 899.27 seconds
TotalCapSize: 648.85MB CapLen: 96 bytes
# of packets: 11529681 (5938.87MB)
AvgRate: 55.40Mbps stddev:13.49M
IP flow (unique src/dst pair) Information
# of flows: 787247 (avg. 14.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 2.7% 2.5% 1.4% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 398468
Top 10 bandwidth usage (bytes/total in %):
12.3% 10.2% 8.2% 7.2% 6.5% 5.1% 3.6% 2.9% 2.8% 2.7%
# of IPv6 addresses: 1756
Top 10 bandwidth usage (bytes/total in %):
16.6% 14.0% 8.7% 7.9% 7.5% 5.9% 5.2% 3.5% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180530.pktlen.png)
detailed numbers
[ 32- 63]: 1956318
[ 64- 127]: 4333321
[ 128- 255]: 903762
[ 256- 511]: 573610
[ 512- 1023]: 217657
[ 1024- 2047]: 3545013
Protocol Breakdown
![[protocol breakdown chart]](200803180530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11529681 (100.00%) 6227360783 (100.00%) 540.12
ip 11503206 ( 99.77%) 6222796276 ( 99.93%) 540.96
tcp 8499322 ( 73.72%) 5601922886 ( 89.96%) 659.10
http(s) 2194880 ( 19.04%) 2989676785 ( 48.01%) 1362.11
http(c) 1129471 ( 9.80%) 93621749 ( 1.50%) 82.89
squid 510054 ( 4.42%) 362119351 ( 5.81%) 709.96
smtp 970863 ( 8.42%) 131060198 ( 2.10%) 134.99
ftp 162199 ( 1.41%) 50704382 ( 0.81%) 312.61
pop3 4099 ( 0.04%) 2007869 ( 0.03%) 489.84
imap 3015 ( 0.03%) 839425 ( 0.01%) 278.42
telnet 3353 ( 0.03%) 214571 ( 0.00%) 63.99
ssh 1369713 ( 11.88%) 540685774 ( 8.68%) 394.74
dns 3700 ( 0.03%) 1876180 ( 0.03%) 507.08
bgp 203 ( 0.00%) 64366 ( 0.00%) 317.07
napster 30 ( 0.00%) 3817 ( 0.00%) 127.23
realaud 12 ( 0.00%) 1320 ( 0.00%) 110.00
rtsp 14213 ( 0.12%) 11606727 ( 0.19%) 816.63
icecast 18102 ( 0.16%) 23108857 ( 0.37%) 1276.59
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2115402 ( 18.35%) 1394330135 ( 22.39%) 659.13
udp 2137404 ( 18.54%) 549617023 ( 8.83%) 257.14
dns 1257304 ( 10.90%) 183918399 ( 2.95%) 146.28
realaud 24 ( 0.00%) 3150 ( 0.00%) 131.25
halflif 19 ( 0.00%) 3075 ( 0.00%) 161.84
starcra 31 ( 0.00%) 5852 ( 0.00%) 188.77
everque 24 ( 0.00%) 3937 ( 0.00%) 164.04
unreal 18 ( 0.00%) 3176 ( 0.00%) 176.44
quake 8 ( 0.00%) 1801 ( 0.00%) 225.12
cuseeme 4 ( 0.00%) 694 ( 0.00%) 173.50
other 879950 ( 7.63%) 365671259 ( 5.87%) 415.56
icmp 855177 ( 7.42%) 69665546 ( 1.12%) 81.46
ipip 383 ( 0.00%) 48512 ( 0.00%) 126.66
ip6 1011 ( 0.01%) 139321 ( 0.00%) 137.81
other 9909 ( 0.09%) 1402988 ( 0.02%) 141.59
frag 5575 ( 0.05%) 4502643 ( 0.07%) 807.65
ip6 26475 ( 0.23%) 4564507 ( 0.07%) 172.41
tcp6 4768 ( 0.04%) 768105 ( 0.01%) 161.10
http(s) 175 ( 0.00%) 204293 ( 0.00%) 1167.39
http(c) 1345 ( 0.01%) 128530 ( 0.00%) 95.56
smtp 554 ( 0.00%) 137051 ( 0.00%) 247.38
ftp 28 ( 0.00%) 2539 ( 0.00%) 90.68
pop3 49 ( 0.00%) 4490 ( 0.00%) 91.63
dns 55 ( 0.00%) 10295 ( 0.00%) 187.18
bgp 87 ( 0.00%) 11534 ( 0.00%) 132.57
other 2475 ( 0.02%) 269373 ( 0.00%) 108.84
udp6 16473 ( 0.14%) 3080889 ( 0.05%) 187.03
dns 14755 ( 0.13%) 2642331 ( 0.04%) 179.08
everque 4 ( 0.00%) 640 ( 0.00%) 160.00
other 1714 ( 0.01%) 437918 ( 0.01%) 255.49
icmp6 5202 ( 0.05%) 709752 ( 0.01%) 136.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1681 ( 0.00%) 840.50
tcpdump file: 200803180530.dump.gz (301.21 MB)