Traffic Trace Info
DumpFile: -
Id: 200803181100
StartTime: Tue Mar 18 11:00:01 2008
EndTime: Tue Mar 18 11:15:01 2008
TotalTime: 900.08 seconds
TotalCapSize: 735.44MB CapLen: 96 bytes
# of packets: 13186776 (7324.31MB)
AvgRate: 68.23Mbps stddev:16.95M
IP flow (unique src/dst pair) Information
# of flows: 599424 (avg. 22.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.0% 1.8% 1.7% 1.5% 1.4% 1.4% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 302316
Top 10 bandwidth usage (bytes/total in %):
7.1% 7.0% 5.5% 5.4% 4.6% 4.4% 4.3% 2.7% 2.6% 2.5%
# of IPv6 addresses: 1840
Top 10 bandwidth usage (bytes/total in %):
15.1% 12.8% 9.8% 8.0% 5.8% 5.4% 4.1% 4.1% 4.0% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181100.pktlen.png)
detailed numbers
[ 32- 63]: 2733616
[ 64- 127]: 4279763
[ 128- 255]: 872368
[ 256- 511]: 387542
[ 512- 1023]: 371572
[ 1024- 2047]: 4541915
Protocol Breakdown
![[protocol breakdown chart]](200803181100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13186776 (100.00%) 7680094731 (100.00%) 582.41
ip 13162871 ( 99.82%) 7675855826 ( 99.94%) 583.14
tcp 10621298 ( 80.55%) 7291953747 ( 94.95%) 686.54
http(s) 3172228 ( 24.06%) 4054553804 ( 52.79%) 1278.14
http(c) 2283927 ( 17.32%) 258190433 ( 3.36%) 113.05
squid 313297 ( 2.38%) 161783198 ( 2.11%) 516.39
smtp 745884 ( 5.66%) 125818603 ( 1.64%) 168.68
ftp 122731 ( 0.93%) 47022011 ( 0.61%) 383.13
pop3 13126 ( 0.10%) 5420578 ( 0.07%) 412.96
imap 19276 ( 0.15%) 15783840 ( 0.21%) 818.83
telnet 1245 ( 0.01%) 185624 ( 0.00%) 149.10
ssh 1394309 ( 10.57%) 591624140 ( 7.70%) 424.31
dns 2358 ( 0.02%) 172913 ( 0.00%) 73.33
bgp 214 ( 0.00%) 62780 ( 0.00%) 293.36
napster 1477 ( 0.01%) 94220 ( 0.00%) 63.79
realaud 255 ( 0.00%) 110202 ( 0.00%) 432.16
rtsp 313819 ( 2.38%) 401678691 ( 5.23%) 1279.97
icecast 22298 ( 0.17%) 13286438 ( 0.17%) 595.86
hotline 15 ( 0.00%) 2490 ( 0.00%) 166.00
other 2214838 ( 16.80%) 1616163722 ( 21.04%) 729.70
udp 1843711 ( 13.98%) 319541139 ( 4.16%) 173.31
dns 926363 ( 7.02%) 136357372 ( 1.78%) 147.20
realaud 8757 ( 0.07%) 5460432 ( 0.07%) 623.55
halflif 8 ( 0.00%) 914 ( 0.00%) 114.25
starcra 27 ( 0.00%) 5439 ( 0.00%) 201.44
everque 35 ( 0.00%) 5379 ( 0.00%) 153.69
unreal 9 ( 0.00%) 792 ( 0.00%) 88.00
quake 8 ( 0.00%) 857 ( 0.00%) 107.12
cuseeme 7 ( 0.00%) 1826 ( 0.00%) 260.86
other 908477 ( 6.89%) 177703989 ( 2.31%) 195.61
icmp 642246 ( 4.87%) 54426028 ( 0.71%) 84.74
ipip 390 ( 0.00%) 49242 ( 0.00%) 126.26
ip6 1038 ( 0.01%) 142741 ( 0.00%) 137.52
other 54188 ( 0.41%) 9742929 ( 0.13%) 179.80
frag 2712 ( 0.02%) 2211800 ( 0.03%) 815.56
ip6 23903 ( 0.18%) 4238785 ( 0.06%) 177.33
tcp6 4124 ( 0.03%) 756939 ( 0.01%) 183.54
http(s) 44 ( 0.00%) 53986 ( 0.00%) 1226.95
http(c) 1358 ( 0.01%) 129888 ( 0.00%) 95.65
smtp 831 ( 0.01%) 341388 ( 0.00%) 410.82
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 99 ( 0.00%) 17896 ( 0.00%) 180.77
other 1756 ( 0.01%) 210487 ( 0.00%) 119.87
udp6 14361 ( 0.11%) 2729586 ( 0.04%) 190.07
dns 12734 ( 0.10%) 2331938 ( 0.03%) 183.13
everque 3 ( 0.00%) 413 ( 0.00%) 137.67
other 1624 ( 0.01%) 397235 ( 0.01%) 244.60
icmp6 5384 ( 0.04%) 744906 ( 0.01%) 138.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3274 ( 0.00%) 818.50
tcpdump file: 200803181100.dump.gz (336.08 MB)