Traffic Trace Info
DumpFile: -
Id: 200803181245
StartTime: Tue Mar 18 12:45:00 2008
EndTime: Tue Mar 18 13:00:00 2008
TotalTime: 900.04 seconds
TotalCapSize: 808.98MB CapLen: 96 bytes
# of packets: 14570464 (9008.07MB)
AvgRate: 83.93Mbps stddev:16.57M
IP flow (unique src/dst pair) Information
# of flows: 683457 (avg. 21.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.3% 3.4% 2.7% 2.6% 2.6% 2.2% 1.7% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 416116
Top 10 bandwidth usage (bytes/total in %):
9.2% 6.8% 5.7% 5.7% 5.3% 5.1% 4.4% 3.9% 3.4% 3.4%
# of IPv6 addresses: 2505
Top 10 bandwidth usage (bytes/total in %):
53.3% 48.9% 6.1% 5.9% 4.2% 3.7% 3.3% 3.0% 2.7% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181245.pktlen.png)
detailed numbers
[ 32- 63]: 3319786
[ 64- 127]: 3855821
[ 128- 255]: 787087
[ 256- 511]: 390760
[ 512- 1023]: 587824
[ 1024- 2047]: 5629186
Protocol Breakdown
![[protocol breakdown chart]](200803181245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14570464 (100.00%) 9445641687 (100.00%) 648.27
ip 14541671 ( 99.80%) 9436332265 ( 99.90%) 648.92
tcp 12701299 ( 87.17%) 9125255192 ( 96.61%) 718.45
http(s) 3499420 ( 24.02%) 4385920190 ( 46.43%) 1253.33
http(c) 2570536 ( 17.64%) 610876621 ( 6.47%) 237.65
squid 315732 ( 2.17%) 149231747 ( 1.58%) 472.65
smtp 472696 ( 3.24%) 81227567 ( 0.86%) 171.84
ftp 109105 ( 0.75%) 43624280 ( 0.46%) 399.84
pop3 10767 ( 0.07%) 4117317 ( 0.04%) 382.40
imap 4079 ( 0.03%) 1305690 ( 0.01%) 320.10
telnet 1133 ( 0.01%) 80792 ( 0.00%) 71.31
ssh 1474762 ( 10.12%) 633376921 ( 6.71%) 429.48
dns 2010 ( 0.01%) 157753 ( 0.00%) 78.48
bgp 201 ( 0.00%) 63215 ( 0.00%) 314.50
napster 74 ( 0.00%) 45700 ( 0.00%) 617.57
realaud 19 ( 0.00%) 2307 ( 0.00%) 121.42
rtsp 368267 ( 2.53%) 476497927 ( 5.04%) 1293.89
icecast 21041 ( 0.14%) 8553095 ( 0.09%) 406.50
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3851455 ( 26.43%) 2730173936 ( 28.90%) 708.87
udp 1400824 ( 9.61%) 257941567 ( 2.73%) 184.14
dns 808061 ( 5.55%) 121736662 ( 1.29%) 150.65
realaud 18134 ( 0.12%) 11069035 ( 0.12%) 610.40
halflif 16 ( 0.00%) 2445 ( 0.00%) 152.81
starcra 32 ( 0.00%) 5700 ( 0.00%) 178.12
everque 23 ( 0.00%) 3498 ( 0.00%) 152.09
unreal 4 ( 0.00%) 1002 ( 0.00%) 250.50
quake 10 ( 0.00%) 1627 ( 0.00%) 162.70
cuseeme 4 ( 0.00%) 248 ( 0.00%) 62.00
other 574521 ( 3.94%) 125113617 ( 1.32%) 217.77
icmp 328053 ( 2.25%) 31044137 ( 0.33%) 94.63
ipip 307 ( 0.00%) 37730 ( 0.00%) 122.90
ip6 1073 ( 0.01%) 146831 ( 0.00%) 136.84
other 110115 ( 0.76%) 21906808 ( 0.23%) 198.94
frag 1143 ( 0.01%) 970275 ( 0.01%) 848.88
ip6 28793 ( 0.20%) 9309422 ( 0.10%) 323.32
tcp6 4506 ( 0.03%) 706994 ( 0.01%) 156.90
http(s) 58 ( 0.00%) 61689 ( 0.00%) 1063.60
http(c) 1692 ( 0.01%) 169908 ( 0.00%) 100.42
smtp 573 ( 0.00%) 227629 ( 0.00%) 397.26
pop3 37 ( 0.00%) 3398 ( 0.00%) 91.84
dns 8 ( 0.00%) 1418 ( 0.00%) 177.25
bgp 96 ( 0.00%) 11896 ( 0.00%) 123.92
other 2042 ( 0.01%) 231056 ( 0.00%) 113.15
udp6 15594 ( 0.11%) 3331534 ( 0.04%) 213.64
dns 12474 ( 0.09%) 2247580 ( 0.02%) 180.18
unreal 1 ( 0.00%) 576 ( 0.00%) 576.00
other 3119 ( 0.02%) 1083378 ( 0.01%) 347.35
icmp6 5169 ( 0.04%) 707145 ( 0.01%) 136.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3494 ( 0.02%) 4559669 ( 0.05%) 1305.00
tcpdump file: 200803181245.dump.gz (368.85 MB)