Traffic Trace Info
DumpFile: -
Id: 200803181130
StartTime: Tue Mar 18 11:30:01 2008
EndTime: Tue Mar 18 11:45:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 713.44MB CapLen: 96 bytes
# of packets: 12810979 (7617.11MB)
AvgRate: 71.03Mbps stddev:13.71M
IP flow (unique src/dst pair) Information
# of flows: 508456 (avg. 25.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.4% 2.0% 1.6% 1.5% 1.5% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 271678
Top 10 bandwidth usage (bytes/total in %):
8.3% 5.8% 5.2% 5.1% 5.0% 4.5% 4.2% 2.7% 2.7% 2.6%
# of IPv6 addresses: 1867
Top 10 bandwidth usage (bytes/total in %):
11.3% 9.8% 8.9% 8.2% 5.6% 5.6% 4.6% 4.3% 4.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181130.pktlen.png)
detailed numbers
[ 32- 63]: 2516465
[ 64- 127]: 3910155
[ 128- 255]: 821642
[ 256- 511]: 360869
[ 512- 1023]: 518946
[ 1024- 2047]: 4682902
Protocol Breakdown
![[protocol breakdown chart]](200803181130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12810979 (100.00%) 7987118595 (100.00%) 623.46
ip 12788899 ( 99.83%) 7983237943 ( 99.95%) 624.23
tcp 10640050 ( 83.05%) 7623999320 ( 95.45%) 716.54
http(s) 3419911 ( 26.70%) 4466636267 ( 55.92%) 1306.07
http(c) 2272109 ( 17.74%) 264040424 ( 3.31%) 116.21
squid 501085 ( 3.91%) 361753293 ( 4.53%) 721.94
smtp 489884 ( 3.82%) 86539937 ( 1.08%) 176.65
ftp 114081 ( 0.89%) 45224528 ( 0.57%) 396.42
pop3 17022 ( 0.13%) 8604529 ( 0.11%) 505.49
imap 4619 ( 0.04%) 1942614 ( 0.02%) 420.57
telnet 790 ( 0.01%) 58298 ( 0.00%) 73.79
ssh 1474612 ( 11.51%) 637379983 ( 7.98%) 432.24
dns 3552 ( 0.03%) 1863829 ( 0.02%) 524.73
bgp 190 ( 0.00%) 52108 ( 0.00%) 274.25
napster 25 ( 0.00%) 2742 ( 0.00%) 109.68
realaud 43 ( 0.00%) 7152 ( 0.00%) 166.33
rtsp 110570 ( 0.86%) 131343915 ( 1.64%) 1187.88
icecast 20209 ( 0.16%) 8474891 ( 0.11%) 419.36
hotline 18 ( 0.00%) 2706 ( 0.00%) 150.33
other 2211326 ( 17.26%) 1610071864 ( 20.16%) 728.10
udp 1615516 ( 12.61%) 302894487 ( 3.79%) 187.49
dns 814884 ( 6.36%) 121105068 ( 1.52%) 148.62
realaud 14389 ( 0.11%) 7700319 ( 0.10%) 535.15
halflif 10 ( 0.00%) 880 ( 0.00%) 88.00
starcra 20 ( 0.00%) 3287 ( 0.00%) 164.35
everque 34 ( 0.00%) 5346 ( 0.00%) 157.24
unreal 14 ( 0.00%) 1986 ( 0.00%) 141.86
quake 9 ( 0.00%) 1313 ( 0.00%) 145.89
cuseeme 10 ( 0.00%) 1271 ( 0.00%) 127.10
other 786132 ( 6.14%) 174066124 ( 2.18%) 221.42
icmp 433336 ( 3.38%) 39314604 ( 0.49%) 90.73
ipip 400 ( 0.00%) 50640 ( 0.00%) 126.60
ip6 1056 ( 0.01%) 145654 ( 0.00%) 137.93
other 98541 ( 0.77%) 16833238 ( 0.21%) 170.82
frag 1303 ( 0.01%) 1089332 ( 0.01%) 836.02
ip6 22080 ( 0.17%) 3880652 ( 0.05%) 175.75
tcp6 4633 ( 0.04%) 705708 ( 0.01%) 152.32
http(s) 122 ( 0.00%) 148514 ( 0.00%) 1217.33
http(c) 1827 ( 0.01%) 181970 ( 0.00%) 99.60
smtp 361 ( 0.00%) 111929 ( 0.00%) 310.05
ftp 17 ( 0.00%) 1852 ( 0.00%) 108.94
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
dns 11 ( 0.00%) 1094 ( 0.00%) 99.45
bgp 84 ( 0.00%) 11444 ( 0.00%) 136.24
other 2176 ( 0.02%) 245685 ( 0.00%) 112.91
udp6 12294 ( 0.10%) 2465385 ( 0.03%) 200.54
dns 10549 ( 0.08%) 2020488 ( 0.03%) 191.53
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1743 ( 0.01%) 444644 ( 0.01%) 255.10
icmp6 5105 ( 0.04%) 689040 ( 0.01%) 134.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 16439 ( 0.00%) 913.28
tcpdump file: 200803181130.dump.gz (332.04 MB)