Traffic Trace Info
DumpFile: -
Id: 200803180645
StartTime: Tue Mar 18 06:45:00 2008
EndTime: Tue Mar 18 07:00:00 2008
TotalTime: 900.24 seconds
TotalCapSize: 622.94MB CapLen: 96 bytes
# of packets: 10962540 (5680.96MB)
AvgRate: 52.93Mbps stddev:11.53M
IP flow (unique src/dst pair) Information
# of flows: 730971 (avg. 15.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.0% 2.6% 1.5% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 401862
Top 10 bandwidth usage (bytes/total in %):
10.3% 10.2% 8.3% 7.2% 5.8% 5.3% 4.3% 4.0% 3.2% 2.9%
# of IPv6 addresses: 2270
Top 10 bandwidth usage (bytes/total in %):
21.6% 17.0% 14.2% 9.2% 6.7% 4.4% 4.4% 3.8% 3.5% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180645.pktlen.png)
detailed numbers
[ 32- 63]: 1848036
[ 64- 127]: 4189502
[ 128- 255]: 769933
[ 256- 511]: 521086
[ 512- 1023]: 210347
[ 1024- 2047]: 3423636
Protocol Breakdown
![[protocol breakdown chart]](200803180645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10962540 (100.00%) 5956915163 (100.00%) 543.39
ip 10934753 ( 99.75%) 5951878533 ( 99.92%) 544.31
tcp 8166866 ( 74.50%) 5434708725 ( 91.23%) 665.46
http(s) 2030580 ( 18.52%) 2769862677 ( 46.50%) 1364.07
http(c) 998271 ( 9.11%) 104869997 ( 1.76%) 105.05
squid 419666 ( 3.83%) 226651047 ( 3.80%) 540.07
smtp 729845 ( 6.66%) 108793090 ( 1.83%) 149.06
ftp 156118 ( 1.42%) 56830822 ( 0.95%) 364.02
pop3 5080 ( 0.05%) 2916016 ( 0.05%) 574.02
imap 2616 ( 0.02%) 499148 ( 0.01%) 190.81
telnet 3215 ( 0.03%) 226731 ( 0.00%) 70.52
ssh 1287817 ( 11.75%) 450748849 ( 7.57%) 350.01
dns 1848 ( 0.02%) 135965 ( 0.00%) 73.57
bgp 208 ( 0.00%) 58198 ( 0.00%) 279.80
napster 25 ( 0.00%) 6131 ( 0.00%) 245.24
realaud 45 ( 0.00%) 10055 ( 0.00%) 223.44
rtsp 1552 ( 0.01%) 102333 ( 0.00%) 65.94
icecast 20608 ( 0.19%) 26764426 ( 0.45%) 1298.74
hotline 5 ( 0.00%) 302 ( 0.00%) 60.40
other 2509365 ( 22.89%) 1686232818 ( 28.31%) 671.98
udp 1739087 ( 15.86%) 436203793 ( 7.32%) 250.82
dns 1109474 ( 10.12%) 175627907 ( 2.95%) 158.30
realaud 32 ( 0.00%) 6017 ( 0.00%) 188.03
halflif 16 ( 0.00%) 2369 ( 0.00%) 148.06
starcra 36 ( 0.00%) 6985 ( 0.00%) 194.03
everque 13 ( 0.00%) 1577 ( 0.00%) 121.31
unreal 18 ( 0.00%) 2736 ( 0.00%) 152.00
quake 11 ( 0.00%) 1248 ( 0.00%) 113.45
cuseeme 6 ( 0.00%) 395 ( 0.00%) 65.83
other 629452 ( 5.74%) 260545662 ( 4.37%) 413.92
icmp 1017762 ( 9.28%) 79420435 ( 1.33%) 78.03
ipip 305 ( 0.00%) 36862 ( 0.00%) 120.86
ip6 1057 ( 0.01%) 143685 ( 0.00%) 135.94
other 9676 ( 0.09%) 1365033 ( 0.02%) 141.07
frag 11473 ( 0.10%) 9200662 ( 0.15%) 801.94
ip6 27787 ( 0.25%) 5036630 ( 0.08%) 181.26
tcp6 4763 ( 0.04%) 756753 ( 0.01%) 158.88
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1525 ( 0.01%) 148112 ( 0.00%) 97.12
smtp 987 ( 0.01%) 356353 ( 0.01%) 361.05
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 77 ( 0.00%) 9213 ( 0.00%) 119.65
other 2134 ( 0.02%) 239249 ( 0.00%) 112.11
udp6 17722 ( 0.16%) 3560837 ( 0.06%) 200.93
dns 14909 ( 0.14%) 2789553 ( 0.05%) 187.11
other 2813 ( 0.03%) 771284 ( 0.01%) 274.19
icmp6 5272 ( 0.05%) 714960 ( 0.01%) 135.61
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803180645.dump.gz (281.40 MB)