Traffic Trace Info
DumpFile: -
Id: 200803180600
StartTime: Tue Mar 18 06:00:01 2008
EndTime: Tue Mar 18 06:15:00 2008
TotalTime: 899.85 seconds
TotalCapSize: 589.23MB CapLen: 96 bytes
# of packets: 10443572 (5818.78MB)
AvgRate: 54.25Mbps stddev:10.86M
IP flow (unique src/dst pair) Information
# of flows: 601372 (avg. 17.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.8% 2.2% 1.5% 1.4% 1.1% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 309027
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.3% 9.0% 6.7% 6.3% 5.5% 3.9% 3.3% 3.1% 2.8%
# of IPv6 addresses: 1956
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.0% 10.2% 8.7% 6.1% 6.1% 5.7% 5.1% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180600.pktlen.png)
detailed numbers
[ 32- 63]: 1648813
[ 64- 127]: 3852902
[ 128- 255]: 816669
[ 256- 511]: 312785
[ 512- 1023]: 221099
[ 1024- 2047]: 3591304
Protocol Breakdown
![[protocol breakdown chart]](200803180600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10443572 (100.00%) 6101431133 (100.00%) 584.23
ip 10418610 ( 99.76%) 6096804641 ( 99.92%) 585.18
tcp 8196993 ( 78.49%) 5586467680 ( 91.56%) 681.53
http(s) 2163676 ( 20.72%) 2952504323 ( 48.39%) 1364.58
http(c) 1219327 ( 11.68%) 135031847 ( 2.21%) 110.74
squid 450147 ( 4.31%) 325015771 ( 5.33%) 722.02
smtp 806661 ( 7.72%) 114800741 ( 1.88%) 142.32
ftp 183941 ( 1.76%) 78737611 ( 1.29%) 428.06
pop3 4869 ( 0.05%) 2733058 ( 0.04%) 561.32
imap 2951 ( 0.03%) 556910 ( 0.01%) 188.72
telnet 2116 ( 0.02%) 135846 ( 0.00%) 64.20
ssh 1287612 ( 12.33%) 532234924 ( 8.72%) 413.35
dns 1926 ( 0.02%) 149252 ( 0.00%) 77.49
bgp 200 ( 0.00%) 64504 ( 0.00%) 322.52
napster 43 ( 0.00%) 13737 ( 0.00%) 319.47
realaud 21 ( 0.00%) 1968 ( 0.00%) 93.71
rtsp 1566 ( 0.01%) 104789 ( 0.00%) 66.92
icecast 25163 ( 0.24%) 34101602 ( 0.56%) 1355.23
hotline 31 ( 0.00%) 4646 ( 0.00%) 149.87
other 2046742 ( 19.60%) 1410276091 ( 23.11%) 689.03
udp 1765618 ( 16.91%) 469418004 ( 7.69%) 265.87
dns 1083313 ( 10.37%) 161208525 ( 2.64%) 148.81
realaud 34 ( 0.00%) 4324 ( 0.00%) 127.18
halflif 21 ( 0.00%) 2023 ( 0.00%) 96.33
starcra 39 ( 0.00%) 8018 ( 0.00%) 205.59
everque 41 ( 0.00%) 7923 ( 0.00%) 193.24
unreal 9 ( 0.00%) 1472 ( 0.00%) 163.56
quake 7 ( 0.00%) 1163 ( 0.00%) 166.14
cuseeme 5 ( 0.00%) 672 ( 0.00%) 134.40
other 682126 ( 6.53%) 308172612 ( 5.05%) 451.78
icmp 444647 ( 4.26%) 39324168 ( 0.64%) 88.44
ipip 377 ( 0.00%) 49218 ( 0.00%) 130.55
ip6 1002 ( 0.01%) 137102 ( 0.00%) 136.83
other 9973 ( 0.10%) 1408469 ( 0.02%) 141.23
frag 5817 ( 0.06%) 4700178 ( 0.08%) 808.01
ip6 24962 ( 0.24%) 4626492 ( 0.08%) 185.34
tcp6 4533 ( 0.04%) 750217 ( 0.01%) 165.50
http(c) 1371 ( 0.01%) 132298 ( 0.00%) 96.50
smtp 972 ( 0.01%) 373120 ( 0.01%) 383.87
pop3 36 ( 0.00%) 3350 ( 0.00%) 93.06
bgp 67 ( 0.00%) 7234 ( 0.00%) 107.97
other 2087 ( 0.02%) 234215 ( 0.00%) 112.23
udp6 15094 ( 0.14%) 3132497 ( 0.05%) 207.53
dns 13180 ( 0.13%) 2572179 ( 0.04%) 195.16
other 1914 ( 0.02%) 560318 ( 0.01%) 292.75
icmp6 5303 ( 0.05%) 737824 ( 0.01%) 139.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1874 ( 0.00%) 937.00
tcpdump file: 200803180600.dump.gz (277.00 MB)