Traffic Trace Info
DumpFile: -
Id: 200803181230
StartTime: Tue Mar 18 12:30:01 2008
EndTime: Tue Mar 18 12:45:00 2008
TotalTime: 899.82 seconds
TotalCapSize: 817.27MB CapLen: 96 bytes
# of packets: 14738786 (8857.35MB)
AvgRate: 82.59Mbps stddev:18.28M
IP flow (unique src/dst pair) Information
# of flows: 782835 (avg. 18.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.4% 3.9% 3.1% 2.3% 2.3% 1.8% 1.7% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 482264
Top 10 bandwidth usage (bytes/total in %):
9.1% 9.0% 5.3% 4.8% 4.6% 4.5% 4.5% 4.0% 4.0% 3.3%
# of IPv6 addresses: 2192
Top 10 bandwidth usage (bytes/total in %):
46.4% 40.1% 5.7% 3.4% 3.0% 3.0% 2.7% 2.6% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181230.pktlen.png)
detailed numbers
[ 32- 63]: 3340708
[ 64- 127]: 4012792
[ 128- 255]: 769746
[ 256- 511]: 648953
[ 512- 1023]: 516853
[ 1024- 2047]: 5449734
Protocol Breakdown
![[protocol breakdown chart]](200803181230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14738786 (100.00%) 9287602319 (100.00%) 630.15
ip 14716522 ( 99.85%) 9281357824 ( 99.93%) 630.68
tcp 12497594 ( 84.79%) 8800741103 ( 94.76%) 704.19
http(s) 3359253 ( 22.79%) 4259330258 ( 45.86%) 1267.94
http(c) 2365353 ( 16.05%) 290859018 ( 3.13%) 122.97
squid 477607 ( 3.24%) 331369778 ( 3.57%) 693.81
smtp 484225 ( 3.29%) 79035953 ( 0.85%) 163.22
ftp 111975 ( 0.76%) 46359938 ( 0.50%) 414.02
pop3 15192 ( 0.10%) 6796575 ( 0.07%) 447.38
imap 4517 ( 0.03%) 1710247 ( 0.02%) 378.62
telnet 791 ( 0.01%) 57700 ( 0.00%) 72.95
ssh 1451365 ( 9.85%) 638599536 ( 6.88%) 440.00
dns 3361 ( 0.02%) 1848037 ( 0.02%) 549.85
bgp 172 ( 0.00%) 48274 ( 0.00%) 280.66
napster 135 ( 0.00%) 130665 ( 0.00%) 967.89
realaud 515 ( 0.00%) 192649 ( 0.00%) 374.08
rtsp 372874 ( 2.53%) 403804396 ( 4.35%) 1082.95
icecast 192352 ( 1.31%) 158541780 ( 1.71%) 824.23
hotline 18 ( 0.00%) 1824 ( 0.00%) 101.33
other 3657878 ( 24.82%) 2582053815 ( 27.80%) 705.89
udp 1772396 ( 12.03%) 431913377 ( 4.65%) 243.69
dns 850569 ( 5.77%) 125691945 ( 1.35%) 147.77
realaud 10739 ( 0.07%) 6287835 ( 0.07%) 585.51
halflif 16 ( 0.00%) 1806 ( 0.00%) 112.88
starcra 34 ( 0.00%) 6082 ( 0.00%) 178.88
everque 30 ( 0.00%) 4705 ( 0.00%) 156.83
unreal 11 ( 0.00%) 1812 ( 0.00%) 164.73
quake 22 ( 0.00%) 1939 ( 0.00%) 88.14
cuseeme 9 ( 0.00%) 960 ( 0.00%) 106.67
other 910946 ( 6.18%) 299908693 ( 3.23%) 329.23
icmp 376501 ( 2.55%) 34765773 ( 0.37%) 92.34
ipip 370 ( 0.00%) 45666 ( 0.00%) 123.42
ip6 1037 ( 0.01%) 142266 ( 0.00%) 137.19
other 68624 ( 0.47%) 13749639 ( 0.15%) 200.36
frag 2260 ( 0.02%) 1826782 ( 0.02%) 808.31
ip6 22264 ( 0.15%) 6244495 ( 0.07%) 280.47
tcp6 4383 ( 0.03%) 696048 ( 0.01%) 158.81
http(s) 122 ( 0.00%) 148581 ( 0.00%) 1217.88
http(c) 1387 ( 0.01%) 132523 ( 0.00%) 95.55
squid 3 ( 0.00%) 234 ( 0.00%) 78.00
smtp 470 ( 0.00%) 143410 ( 0.00%) 305.13
pop3 54 ( 0.00%) 4884 ( 0.00%) 90.44
dns 4 ( 0.00%) 608 ( 0.00%) 152.00
bgp 71 ( 0.00%) 8536 ( 0.00%) 120.23
other 2272 ( 0.02%) 257272 ( 0.00%) 113.24
udp6 10516 ( 0.07%) 2287469 ( 0.02%) 217.52
dns 8322 ( 0.06%) 1656396 ( 0.02%) 199.04
everque 5 ( 0.00%) 1440 ( 0.00%) 288.00
other 2189 ( 0.01%) 629633 ( 0.01%) 287.63
icmp6 5443 ( 0.04%) 747424 ( 0.01%) 137.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1892 ( 0.01%) 2509474 ( 0.03%) 1326.36
tcpdump file: 200803181230.dump.gz (373.20 MB)