Traffic Trace Info
DumpFile: -
Id: 200803180630
StartTime: Tue Mar 18 06:30:01 2008
EndTime: Tue Mar 18 06:45:00 2008
TotalTime: 899.45 seconds
TotalCapSize: 620.66MB CapLen: 96 bytes
# of packets: 10916847 (6414.43MB)
AvgRate: 59.84Mbps stddev:11.67M
IP flow (unique src/dst pair) Information
# of flows: 587854 (avg. 18.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.5% 2.3% 2.2% 1.3% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 299344
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.1% 7.8% 6.2% 6.0% 5.7% 3.5% 3.3% 2.7% 2.6%
# of IPv6 addresses: 2005
Top 10 bandwidth usage (bytes/total in %):
23.8% 18.6% 8.5% 8.0% 7.6% 6.9% 4.1% 3.2% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180630.pktlen.png)
detailed numbers
[ 32- 63]: 1728888
[ 64- 127]: 3849605
[ 128- 255]: 763202
[ 256- 511]: 364028
[ 512- 1023]: 203804
[ 1024- 2047]: 4007320
Protocol Breakdown
![[protocol breakdown chart]](200803180630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10916847 (100.00%) 6726020639 (100.00%) 616.11
ip 10890675 ( 99.76%) 6721224754 ( 99.93%) 617.15
tcp 8531869 ( 78.15%) 6196789338 ( 92.13%) 726.31
http(s) 2371803 ( 21.73%) 3275642742 ( 48.70%) 1381.08
http(c) 1093786 ( 10.02%) 97714588 ( 1.45%) 89.34
squid 649807 ( 5.95%) 544008519 ( 8.09%) 837.18
smtp 679509 ( 6.22%) 99271968 ( 1.48%) 146.09
ftp 243065 ( 2.23%) 145278287 ( 2.16%) 597.69
pop3 4329 ( 0.04%) 1922123 ( 0.03%) 444.01
imap 2926 ( 0.03%) 546281 ( 0.01%) 186.70
telnet 2454 ( 0.02%) 157694 ( 0.00%) 64.26
ssh 1306057 ( 11.96%) 509029472 ( 7.57%) 389.75
dns 3964 ( 0.04%) 1897136 ( 0.03%) 478.59
bgp 213 ( 0.00%) 63727 ( 0.00%) 299.19
napster 41 ( 0.00%) 5480 ( 0.00%) 133.66
realaud 63 ( 0.00%) 8592 ( 0.00%) 136.38
rtsp 1583 ( 0.01%) 114660 ( 0.00%) 72.43
icecast 18410 ( 0.17%) 23396098 ( 0.35%) 1270.84
hotline 14 ( 0.00%) 1452 ( 0.00%) 103.71
other 2153784 ( 19.73%) 1497726859 ( 22.27%) 695.39
udp 1694841 ( 15.53%) 468750601 ( 6.97%) 276.57
dns 1009589 ( 9.25%) 161185964 ( 2.40%) 159.66
realaud 18 ( 0.00%) 2412 ( 0.00%) 134.00
halflif 12 ( 0.00%) 946 ( 0.00%) 78.83
starcra 28 ( 0.00%) 4999 ( 0.00%) 178.54
everque 18 ( 0.00%) 3224 ( 0.00%) 179.11
unreal 8 ( 0.00%) 1362 ( 0.00%) 170.25
quake 9 ( 0.00%) 897 ( 0.00%) 99.67
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 685066 ( 6.28%) 307531858 ( 4.57%) 448.91
icmp 652816 ( 5.98%) 54111846 ( 0.80%) 82.89
ipip 368 ( 0.00%) 47540 ( 0.00%) 129.18
ip6 1026 ( 0.01%) 142405 ( 0.00%) 138.80
other 9755 ( 0.09%) 1383024 ( 0.02%) 141.78
frag 10783 ( 0.10%) 8826693 ( 0.13%) 818.57
ip6 26172 ( 0.24%) 4795885 ( 0.07%) 183.24
tcp6 4583 ( 0.04%) 799347 ( 0.01%) 174.42
http(s) 131 ( 0.00%) 151223 ( 0.00%) 1154.37
http(c) 1513 ( 0.01%) 146168 ( 0.00%) 96.61
smtp 660 ( 0.01%) 242647 ( 0.00%) 367.65
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 78 ( 0.00%) 10350 ( 0.00%) 132.69
other 2168 ( 0.02%) 245917 ( 0.00%) 113.43
udp6 16327 ( 0.15%) 3259520 ( 0.05%) 199.64
dns 14138 ( 0.13%) 2553414 ( 0.04%) 180.61
other 2189 ( 0.02%) 706106 ( 0.01%) 322.57
icmp6 5227 ( 0.05%) 729336 ( 0.01%) 139.53
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3466 ( 0.00%) 866.50
tcpdump file: 200803180630.dump.gz (283.84 MB)