Traffic Trace Info
DumpFile: -
Id: 200803180730
StartTime: Tue Mar 18 07:30:00 2008
EndTime: Tue Mar 18 07:45:00 2008
TotalTime: 900.08 seconds
TotalCapSize: 583.13MB CapLen: 96 bytes
# of packets: 10272323 (6017.64MB)
AvgRate: 56.10Mbps stddev:9.45M
IP flow (unique src/dst pair) Information
# of flows: 726366 (avg. 14.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.7% 6.4% 3.0% 2.5% 1.4% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 443881
Top 10 bandwidth usage (bytes/total in %):
19.1% 12.7% 8.4% 7.8% 6.5% 6.4% 4.4% 3.3% 3.0% 3.0%
# of IPv6 addresses: 1881
Top 10 bandwidth usage (bytes/total in %):
15.9% 13.0% 10.5% 9.7% 5.3% 4.7% 4.2% 4.0% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180730.pktlen.png)
detailed numbers
[ 32- 63]: 1723864
[ 64- 127]: 3441456
[ 128- 255]: 771356
[ 256- 511]: 377766
[ 512- 1023]: 204507
[ 1024- 2047]: 3753374
Protocol Breakdown
![[protocol breakdown chart]](200803180730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10272323 (100.00%) 6309949613 (100.00%) 614.27
ip 10247282 ( 99.76%) 6305455226 ( 99.93%) 615.33
tcp 8277029 ( 80.58%) 5949953337 ( 94.29%) 718.85
http(s) 2037603 ( 19.84%) 2757681893 ( 43.70%) 1353.40
http(c) 1067453 ( 10.39%) 133572101 ( 2.12%) 125.13
squid 459787 ( 4.48%) 290551485 ( 4.60%) 631.93
smtp 671807 ( 6.54%) 99080364 ( 1.57%) 147.48
ftp 161748 ( 1.57%) 64955877 ( 1.03%) 401.59
pop3 10902 ( 0.11%) 4440605 ( 0.07%) 407.32
imap 3492 ( 0.03%) 692606 ( 0.01%) 198.34
telnet 1187 ( 0.01%) 75942 ( 0.00%) 63.98
ssh 1290056 ( 12.56%) 532302240 ( 8.44%) 412.62
dns 3819 ( 0.04%) 1919520 ( 0.03%) 502.62
bgp 193 ( 0.00%) 55669 ( 0.00%) 288.44
napster 11 ( 0.00%) 672 ( 0.00%) 61.09
realaud 3 ( 0.00%) 198 ( 0.00%) 66.00
rtsp 1550 ( 0.02%) 102588 ( 0.00%) 66.19
icecast 22722 ( 0.22%) 30258126 ( 0.48%) 1331.67
other 2544694 ( 24.77%) 2034263331 ( 32.24%) 799.41
udp 1577545 ( 15.36%) 319024983 ( 5.06%) 202.23
dns 953771 ( 9.28%) 143981867 ( 2.28%) 150.96
realaud 19 ( 0.00%) 2600 ( 0.00%) 136.84
halflif 11 ( 0.00%) 1350 ( 0.00%) 122.73
starcra 25 ( 0.00%) 4227 ( 0.00%) 169.08
everque 30 ( 0.00%) 4087 ( 0.00%) 136.23
unreal 14 ( 0.00%) 2506 ( 0.00%) 179.00
quake 9 ( 0.00%) 1300 ( 0.00%) 144.44
cuseeme 3 ( 0.00%) 186 ( 0.00%) 62.00
other 623622 ( 6.07%) 175015145 ( 2.77%) 280.64
icmp 381297 ( 3.71%) 34882410 ( 0.55%) 91.48
ipip 340 ( 0.00%) 42192 ( 0.00%) 124.09
ip6 1011 ( 0.01%) 139409 ( 0.00%) 137.89
other 10060 ( 0.10%) 1412895 ( 0.02%) 140.45
frag 10779 ( 0.10%) 8574467 ( 0.14%) 795.48
ip6 25041 ( 0.24%) 4494387 ( 0.07%) 179.48
tcp6 5068 ( 0.05%) 952125 ( 0.02%) 187.87
http(s) 133 ( 0.00%) 152064 ( 0.00%) 1143.34
http(c) 2073 ( 0.02%) 194531 ( 0.00%) 93.84
smtp 917 ( 0.01%) 382428 ( 0.01%) 417.04
pop3 67 ( 0.00%) 6054 ( 0.00%) 90.36
bgp 68 ( 0.00%) 7321 ( 0.00%) 107.66
other 1810 ( 0.02%) 209727 ( 0.00%) 115.87
udp6 14675 ( 0.14%) 2819441 ( 0.04%) 192.13
dns 12717 ( 0.12%) 2299997 ( 0.04%) 180.86
everque 6 ( 0.00%) 916 ( 0.00%) 152.67
other 1952 ( 0.02%) 518528 ( 0.01%) 265.64
icmp6 5266 ( 0.05%) 716875 ( 0.01%) 136.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1866 ( 0.00%) 933.00
tcpdump file: 200803180730.dump.gz (268.08 MB)