Traffic Trace Info
DumpFile: -
Id: 200803180615
StartTime: Tue Mar 18 06:15:00 2008
EndTime: Tue Mar 18 06:30:01 2008
TotalTime: 900.17 seconds
TotalCapSize: 619.97MB CapLen: 96 bytes
# of packets: 10884043 (5929.01MB)
AvgRate: 55.25Mbps stddev:12.22M
IP flow (unique src/dst pair) Information
# of flows: 663179 (avg. 16.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.9% 2.5% 1.4% 1.4% 1.3% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 335595
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.1% 9.0% 6.4% 6.0% 4.9% 4.2% 3.9% 3.7% 3.0%
# of IPv6 addresses: 1826
Top 10 bandwidth usage (bytes/total in %):
34.8% 26.4% 10.1% 7.8% 7.6% 4.2% 4.2% 4.1% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180615.pktlen.png)
detailed numbers
[ 32- 63]: 1799714
[ 64- 127]: 4108817
[ 128- 255]: 795523
[ 256- 511]: 325098
[ 512- 1023]: 202564
[ 1024- 2047]: 3652327
Protocol Breakdown
![[protocol breakdown chart]](200803180615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10884043 (100.00%) 6217015132 (100.00%) 571.20
ip 10853326 ( 99.72%) 6211604965 ( 99.91%) 572.32
tcp 8345451 ( 76.68%) 5714961647 ( 91.92%) 684.80
http(s) 2048223 ( 18.82%) 2794057089 ( 44.94%) 1364.14
http(c) 1172181 ( 10.77%) 142751731 ( 2.30%) 121.78
squid 585481 ( 5.38%) 464358178 ( 7.47%) 793.12
smtp 717974 ( 6.60%) 101667006 ( 1.64%) 141.60
ftp 214120 ( 1.97%) 113963796 ( 1.83%) 532.24
pop3 7933 ( 0.07%) 4820327 ( 0.08%) 607.63
imap 3026 ( 0.03%) 869357 ( 0.01%) 287.30
telnet 7520 ( 0.07%) 4327496 ( 0.07%) 575.46
ssh 1356181 ( 12.46%) 520424782 ( 8.37%) 383.74
dns 8811 ( 0.08%) 10378587 ( 0.17%) 1177.91
bgp 198 ( 0.00%) 58523 ( 0.00%) 295.57
napster 36 ( 0.00%) 2339 ( 0.00%) 64.97
realaud 5 ( 0.00%) 693 ( 0.00%) 138.60
rtsp 1536 ( 0.01%) 100850 ( 0.00%) 65.66
icecast 18365 ( 0.17%) 23569841 ( 0.38%) 1283.41
other 2203856 ( 20.25%) 1533610752 ( 24.67%) 695.88
udp 1659196 ( 15.24%) 428472857 ( 6.89%) 258.24
dns 1037642 ( 9.53%) 152775713 ( 2.46%) 147.23
realaud 27 ( 0.00%) 3425 ( 0.00%) 126.85
halflif 13 ( 0.00%) 2242 ( 0.00%) 172.46
starcra 24 ( 0.00%) 4180 ( 0.00%) 174.17
everque 27 ( 0.00%) 4100 ( 0.00%) 151.85
unreal 9 ( 0.00%) 1558 ( 0.00%) 173.11
quake 18 ( 0.00%) 3713 ( 0.00%) 206.28
cuseeme 4 ( 0.00%) 632 ( 0.00%) 158.00
other 621415 ( 5.71%) 275674136 ( 4.43%) 443.62
icmp 837673 ( 7.70%) 66626304 ( 1.07%) 79.54
ipip 287 ( 0.00%) 34646 ( 0.00%) 120.72
ip6 1049 ( 0.01%) 143481 ( 0.00%) 136.78
other 9670 ( 0.09%) 1366030 ( 0.02%) 141.26
frag 9579 ( 0.09%) 7628604 ( 0.12%) 796.39
ip6 30717 ( 0.28%) 5410167 ( 0.09%) 176.13
tcp6 4266 ( 0.04%) 615682 ( 0.01%) 144.32
http(s) 43 ( 0.00%) 56840 ( 0.00%) 1321.86
http(c) 1487 ( 0.01%) 144605 ( 0.00%) 97.25
smtp 521 ( 0.00%) 165785 ( 0.00%) 318.21
pop3 49 ( 0.00%) 4452 ( 0.00%) 90.86
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 66 ( 0.00%) 7091 ( 0.00%) 107.44
other 2093 ( 0.02%) 236274 ( 0.00%) 112.89
udp6 21511 ( 0.20%) 4115560 ( 0.07%) 191.32
dns 19711 ( 0.18%) 3624315 ( 0.06%) 183.87
other 1800 ( 0.02%) 491245 ( 0.01%) 272.91
icmp6 4906 ( 0.05%) 671072 ( 0.01%) 136.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3773 ( 0.00%) 943.25
tcpdump file: 200803180615.dump.gz (282.72 MB)