Traffic Trace Info
DumpFile: -
Id: 200803181145
StartTime: Tue Mar 18 11:45:00 2008
EndTime: Tue Mar 18 12:00:00 2008
TotalTime: 899.70 seconds
TotalCapSize: 793.91MB CapLen: 96 bytes
# of packets: 14278419 (8506.58MB)
AvgRate: 79.31Mbps stddev:16.21M
IP flow (unique src/dst pair) Information
# of flows: 550813 (avg. 25.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.6% 2.0% 1.9% 1.6% 1.6% 1.4% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 297100
Top 10 bandwidth usage (bytes/total in %):
6.9% 6.3% 6.3% 5.9% 5.3% 4.7% 4.7% 4.6% 2.7% 2.6%
# of IPv6 addresses: 2479
Top 10 bandwidth usage (bytes/total in %):
17.3% 14.4% 11.8% 8.9% 6.1% 5.8% 3.6% 3.6% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181145.pktlen.png)
detailed numbers
[ 32- 63]: 3301897
[ 64- 127]: 3963667
[ 128- 255]: 792917
[ 256- 511]: 375424
[ 512- 1023]: 515094
[ 1024- 2047]: 5329420
Protocol Breakdown
![[protocol breakdown chart]](200803181145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14278419 (100.00%) 8919800510 (100.00%) 624.71
ip 14252621 ( 99.82%) 8915066851 ( 99.95%) 625.50
tcp 12177952 ( 85.29%) 8574089249 ( 96.12%) 704.07
http(s) 3861928 ( 27.05%) 5036498264 ( 56.46%) 1304.14
http(c) 2554171 ( 17.89%) 298280914 ( 3.34%) 116.78
squid 452375 ( 3.17%) 307025896 ( 3.44%) 678.70
smtp 516014 ( 3.61%) 87143486 ( 0.98%) 168.88
ftp 116616 ( 0.82%) 45814185 ( 0.51%) 392.86
pop3 13454 ( 0.09%) 5355970 ( 0.06%) 398.09
imap 5056 ( 0.04%) 2080901 ( 0.02%) 411.57
telnet 761 ( 0.01%) 57412 ( 0.00%) 75.44
ssh 1460267 ( 10.23%) 641253860 ( 7.19%) 439.13
dns 1601 ( 0.01%) 122757 ( 0.00%) 76.68
bgp 200 ( 0.00%) 53767 ( 0.00%) 268.83
napster 20 ( 0.00%) 5987 ( 0.00%) 299.35
realaud 210 ( 0.00%) 69328 ( 0.00%) 330.13
rtsp 443156 ( 3.10%) 483748418 ( 5.42%) 1091.60
icecast 19383 ( 0.14%) 8443339 ( 0.09%) 435.61
hotline 24 ( 0.00%) 4605 ( 0.00%) 191.88
other 2732715 ( 19.14%) 1658130100 ( 18.59%) 606.77
udp 1591440 ( 11.15%) 286185309 ( 3.21%) 179.83
dns 848597 ( 5.94%) 124724268 ( 1.40%) 146.98
realaud 14870 ( 0.10%) 7950019 ( 0.09%) 534.63
halflif 7 ( 0.00%) 1455 ( 0.00%) 207.86
starcra 42 ( 0.00%) 7014 ( 0.00%) 167.00
everque 19 ( 0.00%) 2230 ( 0.00%) 117.37
unreal 7 ( 0.00%) 1124 ( 0.00%) 160.57
quake 9 ( 0.00%) 971 ( 0.00%) 107.89
cuseeme 22 ( 0.00%) 3128 ( 0.00%) 142.18
other 727829 ( 5.10%) 153484091 ( 1.72%) 210.88
icmp 397236 ( 2.78%) 37055502 ( 0.42%) 93.28
ipip 286 ( 0.00%) 35604 ( 0.00%) 124.49
ip6 1030 ( 0.01%) 141490 ( 0.00%) 137.37
other 84677 ( 0.59%) 17559697 ( 0.20%) 207.37
frag 1544 ( 0.01%) 1306929 ( 0.01%) 846.46
ip6 25798 ( 0.18%) 4733659 ( 0.05%) 183.49
tcp6 4815 ( 0.03%) 712486 ( 0.01%) 147.97
http(s) 63 ( 0.00%) 60732 ( 0.00%) 964.00
http(c) 1412 ( 0.01%) 138428 ( 0.00%) 98.04
smtp 482 ( 0.00%) 200416 ( 0.00%) 415.80
pop3 34 ( 0.00%) 3134 ( 0.00%) 92.18
bgp 72 ( 0.00%) 8927 ( 0.00%) 123.99
other 2752 ( 0.02%) 300849 ( 0.00%) 109.32
udp6 15744 ( 0.11%) 3290869 ( 0.04%) 209.02
dns 12711 ( 0.09%) 2374512 ( 0.03%) 186.81
everque 1 ( 0.00%) 552 ( 0.00%) 552.00
unreal 1 ( 0.00%) 142 ( 0.00%) 142.00
other 3031 ( 0.02%) 915663 ( 0.01%) 302.10
icmp6 5204 ( 0.04%) 721173 ( 0.01%) 138.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 5051 ( 0.00%) 1010.20
tcpdump file: 200803181145.dump.gz (363.73 MB)