Traffic Trace Info
DumpFile: -
Id: 200803181200
StartTime: Tue Mar 18 12:00:00 2008
EndTime: Tue Mar 18 12:15:01 2008
TotalTime: 900.62 seconds
TotalCapSize: 789.29MB CapLen: 96 bytes
# of packets: 14151404 (8269.78MB)
AvgRate: 77.03Mbps stddev:13.53M
IP flow (unique src/dst pair) Information
# of flows: 656287 (avg. 21.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 4.7% 2.2% 1.8% 1.7% 1.5% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 334975
Top 10 bandwidth usage (bytes/total in %):
9.2% 8.7% 6.9% 5.6% 4.9% 4.8% 4.3% 4.0% 2.8% 2.8%
# of IPv6 addresses: 2320
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.5% 9.3% 6.9% 6.6% 4.4% 4.4% 4.4% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181200.pktlen.png)
detailed numbers
[ 32- 63]: 3301920
[ 64- 127]: 4002798
[ 128- 255]: 797306
[ 256- 511]: 377377
[ 512- 1023]: 530424
[ 1024- 2047]: 5141579
Protocol Breakdown
![[protocol breakdown chart]](200803181200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14151404 (100.00%) 8671497762 (100.00%) 612.77
ip 14125134 ( 99.81%) 8666728353 ( 99.94%) 613.57
tcp 11969474 ( 84.58%) 8285470640 ( 95.55%) 692.22
http(s) 4027300 ( 28.46%) 4936875111 ( 56.93%) 1225.85
http(c) 2378216 ( 16.81%) 313530093 ( 3.62%) 131.83
squid 465368 ( 3.29%) 325087992 ( 3.75%) 698.56
smtp 546696 ( 3.86%) 95038404 ( 1.10%) 173.84
ftp 116857 ( 0.83%) 55259137 ( 0.64%) 472.88
pop3 12536 ( 0.09%) 5365446 ( 0.06%) 428.00
imap 4054 ( 0.03%) 1152529 ( 0.01%) 284.29
telnet 948 ( 0.01%) 69500 ( 0.00%) 73.31
ssh 1462074 ( 10.33%) 641477406 ( 7.40%) 438.74
dns 2230 ( 0.02%) 189369 ( 0.00%) 84.92
bgp 208 ( 0.00%) 64285 ( 0.00%) 309.06
napster 44 ( 0.00%) 4152 ( 0.00%) 94.36
realaud 12 ( 0.00%) 1336 ( 0.00%) 111.33
rtsp 389430 ( 2.75%) 409204251 ( 4.72%) 1050.78
icecast 20986 ( 0.15%) 8562093 ( 0.10%) 407.99
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2542501 ( 17.97%) 1493588096 ( 17.22%) 587.45
udp 1646611 ( 11.64%) 325606084 ( 3.75%) 197.74
dns 851814 ( 6.02%) 129979364 ( 1.50%) 152.59
realaud 10486 ( 0.07%) 5565273 ( 0.06%) 530.73
halflif 19 ( 0.00%) 1595 ( 0.00%) 83.95
starcra 16 ( 0.00%) 2626 ( 0.00%) 164.12
everque 38 ( 0.00%) 4689 ( 0.00%) 123.39
unreal 20 ( 0.00%) 5094 ( 0.00%) 254.70
quake 9 ( 0.00%) 1129 ( 0.00%) 125.44
cuseeme 6 ( 0.00%) 528 ( 0.00%) 88.00
other 784167 ( 5.54%) 190036699 ( 2.19%) 242.34
icmp 428756 ( 3.03%) 39768925 ( 0.46%) 92.75
ipip 375 ( 0.00%) 46422 ( 0.00%) 123.79
ip6 1058 ( 0.01%) 147346 ( 0.00%) 139.27
other 78860 ( 0.56%) 15688936 ( 0.18%) 198.95
frag 6085 ( 0.04%) 4876744 ( 0.06%) 801.44
ip6 26270 ( 0.19%) 4769409 ( 0.06%) 181.55
tcp6 5005 ( 0.04%) 665432 ( 0.01%) 132.95
http(c) 1559 ( 0.01%) 150802 ( 0.00%) 96.73
smtp 358 ( 0.00%) 131772 ( 0.00%) 368.08
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
ssh 163 ( 0.00%) 60088 ( 0.00%) 368.64
bgp 96 ( 0.00%) 14863 ( 0.00%) 154.82
other 2795 ( 0.02%) 304767 ( 0.00%) 109.04
udp6 15436 ( 0.11%) 3289609 ( 0.04%) 213.11
dns 12966 ( 0.09%) 2567848 ( 0.03%) 198.04
unreal 1 ( 0.00%) 564 ( 0.00%) 564.00
other 2469 ( 0.02%) 721197 ( 0.01%) 292.10
icmp6 5787 ( 0.04%) 799454 ( 0.01%) 138.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10834 ( 0.00%) 902.83
tcpdump file: 200803181200.dump.gz (363.31 MB)