Traffic Trace Info
DumpFile: -
Id: 200803181000
StartTime: Tue Mar 18 10:00:01 2008
EndTime: Tue Mar 18 10:15:00 2008
TotalTime: 899.47 seconds
TotalCapSize: 731.00MB CapLen: 96 bytes
# of packets: 13066767 (8087.32MB)
AvgRate: 75.44Mbps stddev:14.13M
IP flow (unique src/dst pair) Information
# of flows: 611242 (avg. 21.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 7.6% 4.8% 4.6% 3.5% 1.8% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 318778
Top 10 bandwidth usage (bytes/total in %):
18.4% 14.0% 8.7% 7.8% 5.3% 5.0% 4.9% 4.7% 4.4% 4.3%
# of IPv6 addresses: 1971
Top 10 bandwidth usage (bytes/total in %):
18.7% 15.7% 9.5% 8.4% 6.7% 6.5% 4.5% 3.8% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181000.pktlen.png)
detailed numbers
[ 32- 63]: 2656938
[ 64- 127]: 3805823
[ 128- 255]: 841309
[ 256- 511]: 365072
[ 512- 1023]: 259454
[ 1024- 2047]: 5138171
Protocol Breakdown
![[protocol breakdown chart]](200803181000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13066767 (100.00%) 8480164914 (100.00%) 648.99
ip 13043519 ( 99.82%) 8476140854 ( 99.95%) 649.84
tcp 10870053 ( 83.19%) 8148925551 ( 96.09%) 749.67
http(s) 3117654 ( 23.86%) 4159867359 ( 49.05%) 1334.29
http(c) 1809183 ( 13.85%) 219938417 ( 2.59%) 121.57
squid 368630 ( 2.82%) 239427483 ( 2.82%) 649.51
smtp 609609 ( 4.67%) 101819464 ( 1.20%) 167.02
ftp 209835 ( 1.61%) 120239267 ( 1.42%) 573.02
pop3 8604 ( 0.07%) 3698764 ( 0.04%) 429.89
imap 6562 ( 0.05%) 3329914 ( 0.04%) 507.45
telnet 857 ( 0.01%) 55211 ( 0.00%) 64.42
ssh 1324746 ( 10.14%) 542698665 ( 6.40%) 409.66
dns 2615 ( 0.02%) 205706 ( 0.00%) 78.66
bgp 185 ( 0.00%) 50086 ( 0.00%) 270.74
napster 26 ( 0.00%) 2824 ( 0.00%) 108.62
realaud 18 ( 0.00%) 1688 ( 0.00%) 93.78
rtsp 13730 ( 0.11%) 11306154 ( 0.13%) 823.46
icecast 257 ( 0.00%) 18007 ( 0.00%) 70.07
hotline 12 ( 0.00%) 1336 ( 0.00%) 111.33
other 3397526 ( 26.00%) 2746264966 ( 32.38%) 808.31
udp 1654936 ( 12.67%) 276523011 ( 3.26%) 167.09
dns 852352 ( 6.52%) 129873226 ( 1.53%) 152.37
realaud 8716 ( 0.07%) 5447382 ( 0.06%) 624.99
halflif 12 ( 0.00%) 1486 ( 0.00%) 123.83
starcra 22 ( 0.00%) 4419 ( 0.00%) 200.86
everque 31 ( 0.00%) 4891 ( 0.00%) 157.77
unreal 12 ( 0.00%) 2054 ( 0.00%) 171.17
quake 11 ( 0.00%) 1852 ( 0.00%) 168.36
cuseeme 11 ( 0.00%) 1106 ( 0.00%) 100.55
other 793734 ( 6.07%) 141178769 ( 1.66%) 177.87
icmp 484314 ( 3.71%) 45124625 ( 0.53%) 93.17
ipip 363 ( 0.00%) 45824 ( 0.00%) 126.24
ip6 1041 ( 0.01%) 146322 ( 0.00%) 140.56
other 32812 ( 0.25%) 5375521 ( 0.06%) 163.83
frag 6995 ( 0.05%) 5585924 ( 0.07%) 798.56
ip6 23248 ( 0.18%) 4024060 ( 0.05%) 173.09
tcp6 3609 ( 0.03%) 496426 ( 0.01%) 137.55
http(c) 1350 ( 0.01%) 131052 ( 0.00%) 97.08
smtp 397 ( 0.00%) 143183 ( 0.00%) 360.66
pop3 40 ( 0.00%) 3532 ( 0.00%) 88.30
bgp 76 ( 0.00%) 8576 ( 0.00%) 112.84
other 1746 ( 0.01%) 210083 ( 0.00%) 120.32
udp6 14281 ( 0.11%) 2782311 ( 0.03%) 194.83
dns 12293 ( 0.09%) 2217570 ( 0.03%) 180.39
everque 2 ( 0.00%) 274 ( 0.00%) 137.00
other 1986 ( 0.02%) 564467 ( 0.01%) 284.22
icmp6 5320 ( 0.04%) 733771 ( 0.01%) 137.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 7472 ( 0.00%) 934.00
tcpdump file: 200803181000.dump.gz (331.96 MB)