Traffic Trace Info
DumpFile: -
Id: 200803180930
StartTime: Tue Mar 18 09:30:00 2008
EndTime: Tue Mar 18 09:45:00 2008
TotalTime: 900.56 seconds
TotalCapSize: 676.32MB CapLen: 96 bytes
# of packets: 11916678 (7425.68MB)
AvgRate: 69.17Mbps stddev:18.45M
IP flow (unique src/dst pair) Information
# of flows: 555395 (avg. 21.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 5.2% 3.9% 2.1% 1.9% 1.5% 1.5% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 287798
Top 10 bandwidth usage (bytes/total in %):
16.9% 9.5% 6.9% 6.6% 6.2% 5.7% 5.3% 4.5% 4.0% 3.3%
# of IPv6 addresses: 1685
Top 10 bandwidth usage (bytes/total in %):
12.8% 10.6% 9.6% 8.6% 6.4% 6.4% 4.5% 4.5% 4.4% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180930.pktlen.png)
detailed numbers
[ 32- 63]: 2204593
[ 64- 127]: 3764413
[ 128- 255]: 709083
[ 256- 511]: 306287
[ 512- 1023]: 226769
[ 1024- 2047]: 4705533
Protocol Breakdown
![[protocol breakdown chart]](200803180930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11916678 (100.00%) 7786388092 (100.00%) 653.40
ip 11893739 ( 99.81%) 7782360439 ( 99.95%) 654.32
tcp 10269547 ( 86.18%) 7535303280 ( 96.78%) 733.75
http(s) 2737177 ( 22.97%) 3580715074 ( 45.99%) 1308.18
http(c) 1715117 ( 14.39%) 258897209 ( 3.32%) 150.95
squid 375111 ( 3.15%) 252330836 ( 3.24%) 672.68
smtp 548500 ( 4.60%) 90302953 ( 1.16%) 164.64
ftp 148231 ( 1.24%) 49377358 ( 0.63%) 333.11
pop3 13009 ( 0.11%) 8484411 ( 0.11%) 652.20
imap 5043 ( 0.04%) 1642899 ( 0.02%) 325.78
telnet 282 ( 0.00%) 18384 ( 0.00%) 65.19
ssh 1390599 ( 11.67%) 621081779 ( 7.98%) 446.63
dns 4019 ( 0.03%) 1966144 ( 0.03%) 489.21
bgp 180 ( 0.00%) 47137 ( 0.00%) 261.87
napster 6 ( 0.00%) 573 ( 0.00%) 95.50
rtsp 1817 ( 0.02%) 333178 ( 0.00%) 183.37
icecast 697 ( 0.01%) 45349 ( 0.00%) 65.06
hotline 23 ( 0.00%) 1705 ( 0.00%) 74.13
other 3329736 ( 27.94%) 2670058291 ( 34.29%) 801.88
udp 1296576 ( 10.88%) 215344694 ( 2.77%) 166.09
dns 892558 ( 7.49%) 132443215 ( 1.70%) 148.39
realaud 13 ( 0.00%) 1723 ( 0.00%) 132.54
halflif 4 ( 0.00%) 351 ( 0.00%) 87.75
starcra 30 ( 0.00%) 5744 ( 0.00%) 191.47
everque 16 ( 0.00%) 2851 ( 0.00%) 178.19
unreal 15 ( 0.00%) 3312 ( 0.00%) 220.80
quake 11 ( 0.00%) 1449 ( 0.00%) 131.73
cuseeme 4 ( 0.00%) 248 ( 0.00%) 62.00
other 403891 ( 3.39%) 82874006 ( 1.06%) 205.19
icmp 311614 ( 2.61%) 29339358 ( 0.38%) 94.15
ipip 359 ( 0.00%) 43746 ( 0.00%) 121.86
ip6 1022 ( 0.01%) 140416 ( 0.00%) 137.39
other 14621 ( 0.12%) 2188945 ( 0.03%) 149.71
frag 8942 ( 0.08%) 7159507 ( 0.09%) 800.66
ip6 22939 ( 0.19%) 4027653 ( 0.05%) 175.58
tcp6 5072 ( 0.04%) 716912 ( 0.01%) 141.35
http(s) 122 ( 0.00%) 148514 ( 0.00%) 1217.33
http(c) 2888 ( 0.02%) 294282 ( 0.00%) 101.90
smtp 147 ( 0.00%) 43289 ( 0.00%) 294.48
pop3 73 ( 0.00%) 6582 ( 0.00%) 90.16
bgp 101 ( 0.00%) 16368 ( 0.00%) 162.06
other 1741 ( 0.01%) 207877 ( 0.00%) 119.40
udp6 12460 ( 0.10%) 2545112 ( 0.03%) 204.26
dns 10765 ( 0.09%) 2141536 ( 0.03%) 198.94
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1694 ( 0.01%) 403460 ( 0.01%) 238.17
icmp6 5373 ( 0.05%) 757941 ( 0.01%) 141.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3608 ( 0.00%) 902.00
tcpdump file: 200803180930.dump.gz (306.06 MB)