Traffic Trace Info
DumpFile: -
Id: 200803181215
StartTime: Tue Mar 18 12:15:01 2008
EndTime: Tue Mar 18 12:30:01 2008
TotalTime: 899.86 seconds
TotalCapSize: 820.43MB CapLen: 96 bytes
# of packets: 14658842 (8984.83MB)
AvgRate: 83.78Mbps stddev:22.05M
IP flow (unique src/dst pair) Information
# of flows: 654025 (avg. 22.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.1% 3.0% 2.0% 1.8% 1.5% 1.4% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 398735
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.4% 5.2% 5.0% 4.4% 4.1% 3.4% 3.4% 3.2% 3.2%
# of IPv6 addresses: 1912
Top 10 bandwidth usage (bytes/total in %):
26.0% 26.0% 8.2% 5.0% 5.0% 4.8% 4.6% 4.4% 3.5% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181215.pktlen.png)
detailed numbers
[ 32- 63]: 3401929
[ 64- 127]: 3983637
[ 128- 255]: 739473
[ 256- 511]: 398132
[ 512- 1023]: 542165
[ 1024- 2047]: 5593506
Protocol Breakdown
![[protocol breakdown chart]](200803181215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14658842 (100.00%) 9421280839 (100.00%) 642.70
ip 14636689 ( 99.85%) 9416262483 ( 99.95%) 643.33
tcp 12653697 ( 86.32%) 9072260856 ( 96.30%) 716.97
http(s) 3966197 ( 27.06%) 4963854292 ( 52.69%) 1251.54
http(c) 2378816 ( 16.23%) 284750247 ( 3.02%) 119.70
squid 609070 ( 4.15%) 459415597 ( 4.88%) 754.29
smtp 478117 ( 3.26%) 81582742 ( 0.87%) 170.63
ftp 115999 ( 0.79%) 53945128 ( 0.57%) 465.05
pop3 11627 ( 0.08%) 5500537 ( 0.06%) 473.08
imap 3113 ( 0.02%) 654909 ( 0.01%) 210.38
telnet 689 ( 0.00%) 52312 ( 0.00%) 75.92
ssh 1505250 ( 10.27%) 630285042 ( 6.69%) 418.72
dns 8978 ( 0.06%) 10262439 ( 0.11%) 1143.07
bgp 240 ( 0.00%) 93246 ( 0.00%) 388.52
napster 106 ( 0.00%) 60241 ( 0.00%) 568.31
realaud 2426 ( 0.02%) 909165 ( 0.01%) 374.76
rtsp 295349 ( 2.01%) 355307644 ( 3.77%) 1203.01
icecast 38601 ( 0.26%) 22208461 ( 0.24%) 575.33
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 3239109 ( 22.10%) 2203377234 ( 23.39%) 680.24
udp 1492144 ( 10.18%) 289792134 ( 3.08%) 194.21
dns 788935 ( 5.38%) 117511098 ( 1.25%) 148.95
realaud 9823 ( 0.07%) 5519801 ( 0.06%) 561.93
halflif 14 ( 0.00%) 2157 ( 0.00%) 154.07
starcra 42 ( 0.00%) 7353 ( 0.00%) 175.07
everque 30 ( 0.00%) 5522 ( 0.00%) 184.07
unreal 7 ( 0.00%) 3279 ( 0.00%) 468.43
quake 17 ( 0.00%) 1990 ( 0.00%) 117.06
cuseeme 8 ( 0.00%) 861 ( 0.00%) 107.62
other 693249 ( 4.73%) 166733030 ( 1.77%) 240.51
icmp 409171 ( 2.79%) 37314462 ( 0.40%) 91.20
ipip 281 ( 0.00%) 34774 ( 0.00%) 123.75
ip6 1039 ( 0.01%) 141660 ( 0.00%) 136.34
other 80357 ( 0.55%) 16718597 ( 0.18%) 208.05
frag 3724 ( 0.03%) 2969363 ( 0.03%) 797.36
ip6 22153 ( 0.15%) 5018356 ( 0.05%) 226.53
tcp6 5281 ( 0.04%) 1877401 ( 0.02%) 355.50
http(s) 1054 ( 0.01%) 1359328 ( 0.01%) 1289.69
http(c) 1751 ( 0.01%) 200243 ( 0.00%) 114.36
smtp 278 ( 0.00%) 66080 ( 0.00%) 237.70
ftp 31 ( 0.00%) 2689 ( 0.00%) 86.74
pop3 47 ( 0.00%) 4274 ( 0.00%) 90.94
dns 12 ( 0.00%) 1280 ( 0.00%) 106.67
bgp 96 ( 0.00%) 13683 ( 0.00%) 142.53
other 2012 ( 0.01%) 229824 ( 0.00%) 114.23
udp6 11949 ( 0.08%) 2468363 ( 0.03%) 206.57
dns 10132 ( 0.07%) 2047082 ( 0.02%) 202.04
everque 4 ( 0.00%) 527 ( 0.00%) 131.75
other 1813 ( 0.01%) 420754 ( 0.00%) 232.08
icmp6 4888 ( 0.03%) 664774 ( 0.01%) 136.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3602 ( 0.00%) 900.50
tcpdump file: 200803181215.dump.gz (374.32 MB)