Traffic Trace Info
DumpFile: -
Id: 200803180800
StartTime: Tue Mar 18 08:00:01 2008
EndTime: Tue Mar 18 08:15:00 2008
TotalTime: 899.19 seconds
TotalCapSize: 691.62MB CapLen: 96 bytes
# of packets: 12036289 (8002.18MB)
AvgRate: 74.63Mbps stddev:21.15M
IP flow (unique src/dst pair) Information
# of flows: 524088 (avg. 22.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.1% 11.0% 4.7% 4.6% 2.2% 2.0% 1.7% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 272365
Top 10 bandwidth usage (bytes/total in %):
19.6% 15.6% 12.4% 11.0% 5.9% 5.9% 4.9% 4.8% 4.7% 3.9%
# of IPv6 addresses: 1721
Top 10 bandwidth usage (bytes/total in %):
17.7% 14.3% 9.1% 8.6% 8.4% 6.0% 5.6% 5.1% 5.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180800.pktlen.png)
detailed numbers
[ 32- 63]: 1848528
[ 64- 127]: 3747713
[ 128- 255]: 724665
[ 256- 511]: 344055
[ 512- 1023]: 250238
[ 1024- 2047]: 5121090
Protocol Breakdown
![[protocol breakdown chart]](200803180800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12036289 (100.00%) 8390897457 (100.00%) 697.13
ip 12010198 ( 99.78%) 8386558987 ( 99.95%) 698.29
tcp 10317774 ( 85.72%) 8084827296 ( 96.35%) 783.58
http(s) 3161028 ( 26.26%) 4364956358 ( 52.02%) 1380.87
http(c) 1720667 ( 14.30%) 179556309 ( 2.14%) 104.35
squid 535753 ( 4.45%) 429138820 ( 5.11%) 801.00
smtp 711711 ( 5.91%) 134210347 ( 1.60%) 188.57
ftp 173496 ( 1.44%) 80617405 ( 0.96%) 464.66
pop3 9907 ( 0.08%) 5582915 ( 0.07%) 563.53
imap 5726 ( 0.05%) 1245713 ( 0.01%) 217.55
telnet 1353 ( 0.01%) 86490 ( 0.00%) 63.92
ssh 1267218 ( 10.53%) 512841693 ( 6.11%) 404.70
dns 1882 ( 0.02%) 155613 ( 0.00%) 82.68
bgp 249 ( 0.00%) 90423 ( 0.00%) 363.14
napster 7 ( 0.00%) 736 ( 0.00%) 105.14
realaud 4 ( 0.00%) 252 ( 0.00%) 63.00
rtsp 1552 ( 0.01%) 104146 ( 0.00%) 67.10
icecast 13334 ( 0.11%) 15266212 ( 0.18%) 1144.91
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 2713877 ( 22.55%) 2360973258 ( 28.14%) 869.96
udp 1342017 ( 11.15%) 268561708 ( 3.20%) 200.12
dns 944385 ( 7.85%) 140523147 ( 1.67%) 148.80
realaud 23 ( 0.00%) 2589 ( 0.00%) 112.57
halflif 12 ( 0.00%) 1725 ( 0.00%) 143.75
starcra 26 ( 0.00%) 4663 ( 0.00%) 179.35
everque 16 ( 0.00%) 1780 ( 0.00%) 111.25
unreal 9 ( 0.00%) 1605 ( 0.00%) 178.33
quake 7 ( 0.00%) 552 ( 0.00%) 78.86
cuseeme 5 ( 0.00%) 310 ( 0.00%) 62.00
other 397483 ( 3.30%) 128013884 ( 1.53%) 322.06
icmp 339177 ( 2.82%) 31591579 ( 0.38%) 93.14
ipip 366 ( 0.00%) 45460 ( 0.00%) 124.21
ip6 1021 ( 0.01%) 140867 ( 0.00%) 137.97
other 9843 ( 0.08%) 1392077 ( 0.02%) 141.43
frag 10238 ( 0.09%) 8138848 ( 0.10%) 794.96
ip6 26091 ( 0.22%) 4338470 ( 0.05%) 166.28
tcp6 3771 ( 0.03%) 513470 ( 0.01%) 136.16
http(c) 1340 ( 0.01%) 128132 ( 0.00%) 95.62
smtp 524 ( 0.00%) 159528 ( 0.00%) 304.44
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 92 ( 0.00%) 15140 ( 0.00%) 164.57
other 1782 ( 0.01%) 207628 ( 0.00%) 116.51
udp6 14277 ( 0.12%) 2793534 ( 0.03%) 195.67
dns 12623 ( 0.10%) 2397893 ( 0.03%) 189.96
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1653 ( 0.01%) 395499 ( 0.00%) 239.26
icmp6 8013 ( 0.07%) 1027386 ( 0.01%) 128.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803180800.dump.gz (302.85 MB)