Traffic Trace Info
DumpFile: -
Id: 200803180900
StartTime: Tue Mar 18 09:00:01 2008
EndTime: Tue Mar 18 09:15:00 2008
TotalTime: 899.69 seconds
TotalCapSize: 648.32MB CapLen: 96 bytes
# of packets: 11301131 (6824.31MB)
AvgRate: 63.64Mbps stddev:14.18M
IP flow (unique src/dst pair) Information
# of flows: 551010 (avg. 20.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.4% 5.6% 2.4% 1.7% 1.6% 1.6% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 294393
Top 10 bandwidth usage (bytes/total in %):
19.5% 11.7% 8.3% 6.6% 5.8% 5.3% 5.2% 4.8% 3.0% 2.4%
# of IPv6 addresses: 1760
Top 10 bandwidth usage (bytes/total in %):
13.6% 11.7% 11.4% 7.3% 5.6% 5.1% 5.1% 4.7% 4.4% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180900.pktlen.png)
detailed numbers
[ 32- 63]: 1853107
[ 64- 127]: 3949836
[ 128- 255]: 710562
[ 256- 511]: 297478
[ 512- 1023]: 217157
[ 1024- 2047]: 4272991
Protocol Breakdown
![[protocol breakdown chart]](200803180900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11301131 (100.00%) 7155803220 (100.00%) 633.19
ip 11280269 ( 99.82%) 7152284304 ( 99.95%) 634.05
tcp 9461146 ( 83.72%) 6883309226 ( 96.19%) 727.53
http(s) 2975658 ( 26.33%) 4038569003 ( 56.44%) 1357.20
http(c) 1725283 ( 15.27%) 218261054 ( 3.05%) 126.51
squid 294773 ( 2.61%) 189832260 ( 2.65%) 643.99
smtp 729496 ( 6.46%) 173799545 ( 2.43%) 238.25
ftp 165131 ( 1.46%) 69991635 ( 0.98%) 423.86
pop3 8447 ( 0.07%) 3968694 ( 0.06%) 469.83
imap 3860 ( 0.03%) 988312 ( 0.01%) 256.04
telnet 269 ( 0.00%) 17214 ( 0.00%) 63.99
ssh 1473528 ( 13.04%) 612311133 ( 8.56%) 415.54
dns 2127 ( 0.02%) 162651 ( 0.00%) 76.47
bgp 189 ( 0.00%) 62420 ( 0.00%) 330.26
napster 9 ( 0.00%) 2864 ( 0.00%) 318.22
realaud 9 ( 0.00%) 1077 ( 0.00%) 119.67
rtsp 1574 ( 0.01%) 105396 ( 0.00%) 66.96
icecast 3032 ( 0.03%) 3466302 ( 0.05%) 1143.24
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2077759 ( 18.39%) 1571769532 ( 21.96%) 756.47
udp 1273294 ( 11.27%) 221711046 ( 3.10%) 174.12
dns 889964 ( 7.87%) 132999861 ( 1.86%) 149.44
realaud 33 ( 0.00%) 4812 ( 0.00%) 145.82
halflif 5 ( 0.00%) 459 ( 0.00%) 91.80
starcra 28 ( 0.00%) 5421 ( 0.00%) 193.61
everque 22 ( 0.00%) 4686 ( 0.00%) 213.00
unreal 7 ( 0.00%) 1464 ( 0.00%) 209.14
quake 9 ( 0.00%) 763 ( 0.00%) 84.78
cuseeme 9 ( 0.00%) 652 ( 0.00%) 72.44
other 383181 ( 3.39%) 88687107 ( 1.24%) 231.45
icmp 533114 ( 4.72%) 45411673 ( 0.63%) 85.18
ipip 357 ( 0.00%) 44380 ( 0.00%) 124.31
ip6 1056 ( 0.01%) 146371 ( 0.00%) 138.61
other 11302 ( 0.10%) 1661608 ( 0.02%) 147.02
frag 6325 ( 0.06%) 5116845 ( 0.07%) 808.99
ip6 20862 ( 0.18%) 3518916 ( 0.05%) 168.68
tcp6 3691 ( 0.03%) 510533 ( 0.01%) 138.32
http(s) 43 ( 0.00%) 56943 ( 0.00%) 1324.26
http(c) 1508 ( 0.01%) 154053 ( 0.00%) 102.16
smtp 251 ( 0.00%) 76628 ( 0.00%) 305.29
pop3 63 ( 0.00%) 5350 ( 0.00%) 84.92
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 64 ( 0.00%) 6737 ( 0.00%) 105.27
other 1754 ( 0.02%) 210113 ( 0.00%) 119.79
udp6 12147 ( 0.11%) 2326787 ( 0.03%) 191.55
dns 10502 ( 0.09%) 1932510 ( 0.03%) 184.01
other 1645 ( 0.01%) 394277 ( 0.01%) 239.68
icmp6 4994 ( 0.04%) 677516 ( 0.01%) 135.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803180900.dump.gz (290.54 MB)