Traffic Trace Info
DumpFile: -
Id: 200803180845
StartTime: Tue Mar 18 08:45:00 2008
EndTime: Tue Mar 18 09:00:01 2008
TotalTime: 900.37 seconds
TotalCapSize: 639.11MB CapLen: 96 bytes
# of packets: 11208866 (6925.43MB)
AvgRate: 64.52Mbps stddev:16.16M
IP flow (unique src/dst pair) Information
# of flows: 611724 (avg. 18.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.3% 5.4% 2.3% 2.1% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 364871
Top 10 bandwidth usage (bytes/total in %):
20.9% 14.6% 6.4% 5.7% 5.5% 5.5% 5.2% 4.8% 3.1% 2.8%
# of IPv6 addresses: 1781
Top 10 bandwidth usage (bytes/total in %):
12.6% 10.8% 6.8% 6.8% 5.9% 4.8% 4.1% 3.9% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180845.pktlen.png)
detailed numbers
[ 32- 63]: 1736441
[ 64- 127]: 3748405
[ 128- 255]: 666699
[ 256- 511]: 564200
[ 512- 1023]: 211169
[ 1024- 2047]: 4281952
Protocol Breakdown
![[protocol breakdown chart]](200803180845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11208866 (100.00%) 7261843735 (100.00%) 647.87
ip 11186835 ( 99.80%) 7257954776 ( 99.95%) 648.79
tcp 9368703 ( 83.58%) 6873080576 ( 94.65%) 733.62
http(s) 2855109 ( 25.47%) 3894712128 ( 53.63%) 1364.12
http(c) 1698085 ( 15.15%) 191957700 ( 2.64%) 113.04
squid 519799 ( 4.64%) 433394520 ( 5.97%) 833.77
smtp 614849 ( 5.49%) 107432607 ( 1.48%) 174.73
ftp 152127 ( 1.36%) 55990994 ( 0.77%) 368.05
pop3 8187 ( 0.07%) 3934602 ( 0.05%) 480.59
imap 10577 ( 0.09%) 3431242 ( 0.05%) 324.41
telnet 571 ( 0.01%) 36540 ( 0.00%) 63.99
ssh 1371216 ( 12.23%) 595652654 ( 8.20%) 434.40
dns 2216 ( 0.02%) 159824 ( 0.00%) 72.12
bgp 191 ( 0.00%) 55350 ( 0.00%) 289.79
napster 17 ( 0.00%) 1703 ( 0.00%) 100.18
realaud 53 ( 0.00%) 6553 ( 0.00%) 123.64
rtsp 6381 ( 0.06%) 4566747 ( 0.06%) 715.68
icecast 12525 ( 0.11%) 15216532 ( 0.21%) 1214.89
hotline 13 ( 0.00%) 1394 ( 0.00%) 107.23
other 2116787 ( 18.88%) 1566529486 ( 21.57%) 740.05
udp 1479355 ( 13.20%) 352554757 ( 4.85%) 238.32
dns 853111 ( 7.61%) 127332338 ( 1.75%) 149.26
realaud 22 ( 0.00%) 2648 ( 0.00%) 120.36
halflif 20 ( 0.00%) 2561 ( 0.00%) 128.05
starcra 42 ( 0.00%) 7832 ( 0.00%) 186.48
everque 29 ( 0.00%) 5835 ( 0.00%) 201.21
unreal 4 ( 0.00%) 900 ( 0.00%) 225.00
quake 11 ( 0.00%) 1601 ( 0.00%) 145.55
cuseeme 11 ( 0.00%) 851 ( 0.00%) 77.36
other 626075 ( 5.59%) 225188860 ( 3.10%) 359.68
icmp 327868 ( 2.93%) 30785141 ( 0.42%) 93.89
ipip 325 ( 0.00%) 41098 ( 0.00%) 126.46
ip6 1014 ( 0.01%) 138185 ( 0.00%) 136.28
other 9570 ( 0.09%) 1355019 ( 0.02%) 141.59
frag 11617 ( 0.10%) 9285411 ( 0.13%) 799.30
ip6 22031 ( 0.20%) 3888959 ( 0.05%) 176.52
tcp6 5292 ( 0.05%) 727910 ( 0.01%) 137.55
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 2742 ( 0.02%) 249540 ( 0.00%) 91.01
smtp 579 ( 0.01%) 254824 ( 0.00%) 440.11
pop3 33 ( 0.00%) 3048 ( 0.00%) 92.36
dns 15 ( 0.00%) 1221 ( 0.00%) 81.40
bgp 75 ( 0.00%) 8406 ( 0.00%) 112.08
other 1843 ( 0.02%) 210259 ( 0.00%) 114.09
udp6 10850 ( 0.10%) 2368812 ( 0.03%) 218.32
dns 8977 ( 0.08%) 1823352 ( 0.03%) 203.11
everque 3 ( 0.00%) 413 ( 0.00%) 137.67
other 1870 ( 0.02%) 545047 ( 0.01%) 291.47
icmp6 5852 ( 0.05%) 782372 ( 0.01%) 133.69
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5649 ( 0.00%) 941.50
tcpdump file: 200803180845.dump.gz (286.38 MB)