Traffic Trace Info
DumpFile: -
Id: 200803180545
StartTime: Tue Mar 18 05:45:00 2008
EndTime: Tue Mar 18 06:00:01 2008
TotalTime: 900.40 seconds
TotalCapSize: 607.04MB CapLen: 96 bytes
# of packets: 10731397 (5903.41MB)
AvgRate: 55.00Mbps stddev:10.91M
IP flow (unique src/dst pair) Information
# of flows: 724988 (avg. 14.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 2.7% 2.1% 1.7% 1.5% 1.3% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 382720
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.9% 8.6% 7.8% 6.8% 5.7% 4.0% 2.8% 2.8% 2.4%
# of IPv6 addresses: 2059
Top 10 bandwidth usage (bytes/total in %):
15.7% 13.3% 9.1% 7.7% 7.6% 6.4% 5.6% 4.2% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180545.pktlen.png)
detailed numbers
[ 32- 63]: 1803498
[ 64- 127]: 3856899
[ 128- 255]: 845504
[ 256- 511]: 382477
[ 512- 1023]: 230997
[ 1024- 2047]: 3612022
Protocol Breakdown
![[protocol breakdown chart]](200803180545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10731397 (100.00%) 6190171240 (100.00%) 576.83
ip 10705883 ( 99.76%) 6185714109 ( 99.93%) 577.79
tcp 8320980 ( 77.54%) 5653170188 ( 91.32%) 679.39
http(s) 2213392 ( 20.63%) 3022194353 ( 48.82%) 1365.41
http(c) 1044335 ( 9.73%) 88786635 ( 1.43%) 85.02
squid 406439 ( 3.79%) 259358462 ( 4.19%) 638.12
smtp 867797 ( 8.09%) 122268372 ( 1.98%) 140.90
ftp 173771 ( 1.62%) 63755744 ( 1.03%) 366.90
pop3 5363 ( 0.05%) 3369355 ( 0.05%) 628.26
imap 2534 ( 0.02%) 525276 ( 0.01%) 207.29
telnet 2716 ( 0.03%) 174056 ( 0.00%) 64.09
ssh 1337204 ( 12.46%) 545805917 ( 8.82%) 408.17
dns 1732 ( 0.02%) 166668 ( 0.00%) 96.23
bgp 216 ( 0.00%) 72446 ( 0.00%) 335.40
napster 7 ( 0.00%) 1924 ( 0.00%) 274.86
realaud 21 ( 0.00%) 1762 ( 0.00%) 83.90
rtsp 1552 ( 0.01%) 103518 ( 0.00%) 66.70
icecast 20429 ( 0.19%) 26784199 ( 0.43%) 1311.09
other 2243468 ( 20.91%) 1519801261 ( 24.55%) 677.43
udp 1870894 ( 17.43%) 487498616 ( 7.88%) 260.57
dns 1136989 ( 10.59%) 168497898 ( 2.72%) 148.20
realaud 14 ( 0.00%) 1706 ( 0.00%) 121.86
halflif 17 ( 0.00%) 1538 ( 0.00%) 90.47
starcra 39 ( 0.00%) 7617 ( 0.00%) 195.31
everque 29 ( 0.00%) 4116 ( 0.00%) 141.93
unreal 16 ( 0.00%) 4993 ( 0.00%) 312.06
quake 16 ( 0.00%) 1414 ( 0.00%) 88.38
cuseeme 2 ( 0.00%) 199 ( 0.00%) 99.50
other 733736 ( 6.84%) 318973542 ( 5.15%) 434.73
icmp 503291 ( 4.69%) 43535580 ( 0.70%) 86.50
ipip 296 ( 0.00%) 35002 ( 0.00%) 118.25
ip6 1014 ( 0.01%) 137948 ( 0.00%) 136.04
other 9408 ( 0.09%) 1336775 ( 0.02%) 142.09
frag 7118 ( 0.07%) 5675385 ( 0.09%) 797.33
ip6 25514 ( 0.24%) 4457131 ( 0.07%) 174.69
tcp6 5026 ( 0.05%) 759290 ( 0.01%) 151.07
http(s) 4 ( 0.00%) 526 ( 0.00%) 131.50
http(c) 1869 ( 0.02%) 193131 ( 0.00%) 103.33
smtp 832 ( 0.01%) 301383 ( 0.00%) 362.24
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
ssh 14 ( 0.00%) 3023 ( 0.00%) 215.93
bgp 96 ( 0.00%) 16091 ( 0.00%) 167.61
other 2176 ( 0.02%) 241916 ( 0.00%) 111.17
udp6 15624 ( 0.15%) 3040902 ( 0.05%) 194.63
dns 13437 ( 0.13%) 2387291 ( 0.04%) 177.67
other 2187 ( 0.02%) 653611 ( 0.01%) 298.86
icmp6 4829 ( 0.04%) 650581 ( 0.01%) 134.72
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 2142 ( 0.00%) 535.50
tcpdump file: 200803180545.dump.gz (285.86 MB)