Traffic Trace Info
DumpFile: -
Id: 200803181115
StartTime: Tue Mar 18 11:15:01 2008
EndTime: Tue Mar 18 11:30:01 2008
TotalTime: 899.84 seconds
TotalCapSize: 756.71MB CapLen: 96 bytes
# of packets: 13616373 (7756.69MB)
AvgRate: 72.31Mbps stddev:15.69M
IP flow (unique src/dst pair) Information
# of flows: 687443 (avg. 19.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.0% 2.0% 1.5% 1.3% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 374875
Top 10 bandwidth usage (bytes/total in %):
7.4% 5.5% 5.1% 4.8% 4.8% 4.7% 4.2% 3.1% 3.1% 3.0%
# of IPv6 addresses: 1974
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.7% 9.0% 7.9% 6.4% 5.6% 5.6% 5.0% 4.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181115.pktlen.png)
detailed numbers
[ 32- 63]: 3100380
[ 64- 127]: 3984446
[ 128- 255]: 820033
[ 256- 511]: 395538
[ 512- 1023]: 512293
[ 1024- 2047]: 4803683
Protocol Breakdown
![[protocol breakdown chart]](200803181115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13616373 (100.00%) 8133481665 (100.00%) 597.33
ip 13592713 ( 99.83%) 8128998686 ( 99.94%) 598.04
tcp 11352395 ( 83.37%) 7745910281 ( 95.23%) 682.32
http(s) 3439601 ( 25.26%) 4396069463 ( 54.05%) 1278.08
http(c) 2668958 ( 19.60%) 296696265 ( 3.65%) 111.17
squid 425498 ( 3.12%) 304720435 ( 3.75%) 716.15
smtp 501199 ( 3.68%) 95632621 ( 1.18%) 190.81
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 116147 ( 0.85%) 44266763 ( 0.54%) 381.13
pop3 16402 ( 0.12%) 9361354 ( 0.12%) 570.74
imap 3808 ( 0.03%) 1098835 ( 0.01%) 288.56
telnet 1402 ( 0.01%) 247970 ( 0.00%) 176.87
ssh 1480734 ( 10.87%) 636561239 ( 7.83%) 429.90
dns 2162 ( 0.02%) 158337 ( 0.00%) 73.24
bgp 182 ( 0.00%) 46630 ( 0.00%) 256.21
napster 4 ( 0.00%) 4152 ( 0.00%) 1038.00
realaud 22 ( 0.00%) 3048 ( 0.00%) 138.55
rtsp 346252 ( 2.54%) 367317805 ( 4.52%) 1060.84
icecast 18814 ( 0.14%) 8390682 ( 0.10%) 445.98
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 2331203 ( 17.12%) 1585333242 ( 19.49%) 680.05
udp 1669656 ( 12.26%) 326456111 ( 4.01%) 195.52
dns 816883 ( 6.00%) 122448969 ( 1.51%) 149.90
realaud 10383 ( 0.08%) 5555337 ( 0.07%) 535.04
halflif 14 ( 0.00%) 1795 ( 0.00%) 128.21
starcra 31 ( 0.00%) 7743 ( 0.00%) 249.77
everque 15 ( 0.00%) 2290 ( 0.00%) 152.67
unreal 7 ( 0.00%) 1484 ( 0.00%) 212.00
quake 7 ( 0.00%) 810 ( 0.00%) 115.71
cuseeme 6 ( 0.00%) 387 ( 0.00%) 64.50
other 842292 ( 6.19%) 198429811 ( 2.44%) 235.58
icmp 508200 ( 3.73%) 45418947 ( 0.56%) 89.37
ipip 295 ( 0.00%) 36326 ( 0.00%) 123.14
ip6 1029 ( 0.01%) 140045 ( 0.00%) 136.10
other 61138 ( 0.45%) 11036976 ( 0.14%) 180.53
frag 8312 ( 0.06%) 6606922 ( 0.08%) 794.87
ip6 23660 ( 0.17%) 4482979 ( 0.06%) 189.48
tcp6 4364 ( 0.03%) 783457 ( 0.01%) 179.53
http(s) 43 ( 0.00%) 56840 ( 0.00%) 1321.86
http(c) 1721 ( 0.01%) 183059 ( 0.00%) 106.37
smtp 799 ( 0.01%) 323296 ( 0.00%) 404.63
ftp 1 ( 0.00%) 94 ( 0.00%) 94.00
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
dns 4 ( 0.00%) 456 ( 0.00%) 114.00
bgp 98 ( 0.00%) 17645 ( 0.00%) 180.05
other 1664 ( 0.01%) 198939 ( 0.00%) 119.55
udp6 14282 ( 0.10%) 3006799 ( 0.04%) 210.53
dns 12290 ( 0.09%) 2406613 ( 0.03%) 195.82
other 1992 ( 0.01%) 600186 ( 0.01%) 301.30
icmp6 4975 ( 0.04%) 681424 ( 0.01%) 136.97
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 7083 ( 0.00%) 885.38
tcpdump file: 200803181115.dump.gz (349.35 MB)