Traffic Trace Info
DumpFile: -
Id: 200803180700
StartTime: Tue Mar 18 07:00:00 2008
EndTime: Tue Mar 18 07:15:00 2008
TotalTime: 899.91 seconds
TotalCapSize: 607.83MB CapLen: 96 bytes
# of packets: 10692303 (6429.50MB)
AvgRate: 59.94Mbps stddev:17.16M
IP flow (unique src/dst pair) Information
# of flows: 647313 (avg. 16.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.3% 5.7% 3.8% 3.2% 2.5% 1.4% 1.3% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 359694
Top 10 bandwidth usage (bytes/total in %):
20.2% 14.3% 8.7% 8.3% 7.7% 5.8% 4.3% 4.1% 3.8% 3.3%
# of IPv6 addresses: 1885
Top 10 bandwidth usage (bytes/total in %):
24.2% 19.0% 9.0% 7.8% 5.9% 5.9% 5.9% 4.7% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180700.pktlen.png)
detailed numbers
[ 32- 63]: 1664907
[ 64- 127]: 3510389
[ 128- 255]: 788489
[ 256- 511]: 489355
[ 512- 1023]: 214839
[ 1024- 2047]: 4024324
Protocol Breakdown
![[protocol breakdown chart]](200803180700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10692303 (100.00%) 6741819874 (100.00%) 630.53
ip 10666027 ( 99.75%) 6737161554 ( 99.93%) 631.65
tcp 8615056 ( 80.57%) 6359919126 ( 94.34%) 738.23
http(s) 2061978 ( 19.28%) 2785469804 ( 41.32%) 1350.87
http(c) 964146 ( 9.02%) 111582304 ( 1.66%) 115.73
squid 372175 ( 3.48%) 171635692 ( 2.55%) 461.17
smtp 688720 ( 6.44%) 110131442 ( 1.63%) 159.91
ftp 157172 ( 1.47%) 61283974 ( 0.91%) 389.92
pop3 7509 ( 0.07%) 3797546 ( 0.06%) 505.73
imap 2694 ( 0.03%) 537537 ( 0.01%) 199.53
telnet 929 ( 0.01%) 59804 ( 0.00%) 64.37
ssh 1318432 ( 12.33%) 520224495 ( 7.72%) 394.58
dns 1850 ( 0.02%) 194714 ( 0.00%) 105.25
bgp 177 ( 0.00%) 48336 ( 0.00%) 273.08
napster 20 ( 0.00%) 1856 ( 0.00%) 92.80
realaud 56 ( 0.00%) 3960 ( 0.00%) 70.71
rtsp 1556 ( 0.01%) 103812 ( 0.00%) 66.72
icecast 27633 ( 0.26%) 37544975 ( 0.56%) 1358.70
hotline 13 ( 0.00%) 1386 ( 0.00%) 106.62
other 3009995 ( 28.15%) 2557297429 ( 37.93%) 849.60
udp 1654609 ( 15.47%) 340734804 ( 5.05%) 205.93
dns 1085475 ( 10.15%) 174842586 ( 2.59%) 161.07
realaud 38 ( 0.00%) 3579 ( 0.00%) 94.18
halflif 11 ( 0.00%) 828 ( 0.00%) 75.27
starcra 34 ( 0.00%) 6435 ( 0.00%) 189.26
everque 22 ( 0.00%) 4192 ( 0.00%) 190.55
unreal 15 ( 0.00%) 3657 ( 0.00%) 243.80
quake 6 ( 0.00%) 982 ( 0.00%) 163.67
cuseeme 4 ( 0.00%) 248 ( 0.00%) 62.00
other 568986 ( 5.32%) 165868726 ( 2.46%) 291.52
icmp 385153 ( 3.60%) 34932980 ( 0.52%) 90.70
ipip 354 ( 0.00%) 44916 ( 0.00%) 126.88
ip6 1048 ( 0.01%) 147437 ( 0.00%) 140.68
other 9807 ( 0.09%) 1382291 ( 0.02%) 140.95
frag 4174 ( 0.04%) 3381132 ( 0.05%) 810.05
ip6 26274 ( 0.25%) 4658200 ( 0.07%) 177.29
tcp6 3999 ( 0.04%) 549401 ( 0.01%) 137.38
http(c) 1542 ( 0.01%) 161486 ( 0.00%) 104.73
smtp 414 ( 0.00%) 148405 ( 0.00%) 358.47
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 70 ( 0.00%) 7845 ( 0.00%) 112.07
other 1937 ( 0.02%) 228371 ( 0.00%) 117.90
udp6 16774 ( 0.16%) 3357231 ( 0.05%) 200.14
dns 14993 ( 0.14%) 2890981 ( 0.04%) 192.82
other 1781 ( 0.02%) 466250 ( 0.01%) 261.79
icmp6 5467 ( 0.05%) 743742 ( 0.01%) 136.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3746 ( 0.00%) 936.50
tcpdump file: 200803180700.dump.gz (279.53 MB)