Traffic Trace Info
DumpFile: -
Id: 200803181045
StartTime: Tue Mar 18 10:45:00 2008
EndTime: Tue Mar 18 11:00:01 2008
TotalTime: 900.58 seconds
TotalCapSize: 749.51MB CapLen: 96 bytes
# of packets: 13412261 (8057.32MB)
AvgRate: 75.03Mbps stddev:18.22M
IP flow (unique src/dst pair) Information
# of flows: 637213 (avg. 21.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.5% 4.4% 1.7% 1.7% 1.6% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 365558
Top 10 bandwidth usage (bytes/total in %):
10.9% 5.2% 5.2% 5.0% 4.8% 4.6% 4.5% 4.5% 4.5% 4.1%
# of IPv6 addresses: 1980
Top 10 bandwidth usage (bytes/total in %):
18.3% 15.0% 11.8% 8.8% 6.2% 4.8% 4.2% 4.0% 4.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181045.pktlen.png)
detailed numbers
[ 32- 63]: 2767240
[ 64- 127]: 4117243
[ 128- 255]: 839512
[ 256- 511]: 342436
[ 512- 1023]: 283076
[ 1024- 2047]: 5062754
Protocol Breakdown
![[protocol breakdown chart]](200803181045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13412261 (100.00%) 8448716371 (100.00%) 629.92
ip 13387555 ( 99.82%) 8444192272 ( 99.95%) 630.75
tcp 11193573 ( 83.46%) 8119328038 ( 96.10%) 725.36
http(s) 3652382 ( 27.23%) 4881932992 ( 57.78%) 1336.64
http(c) 2309552 ( 17.22%) 230501603 ( 2.73%) 99.80
squid 255901 ( 1.91%) 154358585 ( 1.83%) 603.20
smtp 584265 ( 4.36%) 120909713 ( 1.43%) 206.94
ftp 128860 ( 0.96%) 47797368 ( 0.57%) 370.92
pop3 11861 ( 0.09%) 4969051 ( 0.06%) 418.94
imap 6750 ( 0.05%) 3305243 ( 0.04%) 489.67
telnet 905 ( 0.01%) 129761 ( 0.00%) 143.38
ssh 1418668 ( 10.58%) 562547150 ( 6.66%) 396.53
dns 2794 ( 0.02%) 316821 ( 0.00%) 113.39
bgp 210 ( 0.00%) 73425 ( 0.00%) 349.64
napster 23 ( 0.00%) 4465 ( 0.00%) 194.13
realaud 4 ( 0.00%) 633 ( 0.00%) 158.25
rtsp 546542 ( 4.07%) 605023097 ( 7.16%) 1107.00
icecast 25082 ( 0.19%) 23497807 ( 0.28%) 936.84
other 2249771 ( 16.77%) 1483960144 ( 17.56%) 659.60
udp 1584066 ( 11.81%) 264455143 ( 3.13%) 166.95
dns 870843 ( 6.49%) 130370431 ( 1.54%) 149.71
realaud 8704 ( 0.06%) 5454420 ( 0.06%) 626.66
halflif 19 ( 0.00%) 3343 ( 0.00%) 175.95
starcra 46 ( 0.00%) 8080 ( 0.00%) 175.65
everque 25 ( 0.00%) 3381 ( 0.00%) 135.24
unreal 18 ( 0.00%) 3400 ( 0.00%) 188.89
quake 17 ( 0.00%) 1531 ( 0.00%) 90.06
cuseeme 8 ( 0.00%) 887 ( 0.00%) 110.88
other 704350 ( 5.25%) 128596256 ( 1.52%) 182.57
icmp 552469 ( 4.12%) 49391261 ( 0.58%) 89.40
ipip 282 ( 0.00%) 34636 ( 0.00%) 122.82
ip6 1035 ( 0.01%) 141589 ( 0.00%) 136.80
other 56130 ( 0.42%) 10841605 ( 0.13%) 193.15
frag 12565 ( 0.09%) 9998163 ( 0.12%) 795.72
ip6 24706 ( 0.18%) 4524099 ( 0.05%) 183.12
tcp6 4028 ( 0.03%) 692780 ( 0.01%) 171.99
http(s) 75 ( 0.00%) 61684 ( 0.00%) 822.45
http(c) 1329 ( 0.01%) 126558 ( 0.00%) 95.23
smtp 689 ( 0.01%) 272229 ( 0.00%) 395.11
pop3 47 ( 0.00%) 4280 ( 0.00%) 91.06
ssh 3 ( 0.00%) 222 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 101 ( 0.00%) 18781 ( 0.00%) 185.95
other 1777 ( 0.01%) 208391 ( 0.00%) 117.27
udp6 15559 ( 0.12%) 3125256 ( 0.04%) 200.86
dns 13380 ( 0.10%) 2452909 ( 0.03%) 183.33
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
unreal 2 ( 0.00%) 322 ( 0.00%) 161.00
other 2176 ( 0.02%) 671449 ( 0.01%) 308.57
icmp6 5075 ( 0.04%) 689422 ( 0.01%) 135.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 12561 ( 0.00%) 897.21
tcpdump file: 200803181045.dump.gz (340.15 MB)