Traffic Trace Info
DumpFile: -
Id: 200803181300
StartTime: Tue Mar 18 13:00:00 2008
EndTime: Tue Mar 18 13:15:00 2008
TotalTime: 900.07 seconds
TotalCapSize: 840.41MB CapLen: 96 bytes
# of packets: 15061254 (9280.24MB)
AvgRate: 86.48Mbps stddev:20.99M
IP flow (unique src/dst pair) Information
# of flows: 558906 (avg. 26.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.2% 3.1% 2.9% 2.3% 1.5% 1.4% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 291923
Top 10 bandwidth usage (bytes/total in %):
8.4% 6.2% 5.3% 3.9% 3.7% 3.7% 3.6% 3.4% 3.3% 3.3%
# of IPv6 addresses: 2025
Top 10 bandwidth usage (bytes/total in %):
53.2% 48.8% 7.2% 4.9% 4.0% 3.5% 3.1% 2.6% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181300.pktlen.png)
detailed numbers
[ 32- 63]: 3175720
[ 64- 127]: 4177749
[ 128- 255]: 925070
[ 256- 511]: 439703
[ 512- 1023]: 596511
[ 1024- 2047]: 5746501
Protocol Breakdown
![[protocol breakdown chart]](200803181300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15061254 (100.00%) 9731041934 (100.00%) 646.10
ip 15029832 ( 99.79%) 9721706025 ( 99.90%) 646.83
tcp 12896296 ( 85.63%) 9344623878 ( 96.03%) 724.60
http(s) 3943174 ( 26.18%) 5092167604 ( 52.33%) 1291.39
http(c) 2842779 ( 18.87%) 608676458 ( 6.25%) 214.11
squid 436490 ( 2.90%) 301238568 ( 3.10%) 690.14
smtp 544394 ( 3.61%) 92072556 ( 0.95%) 169.13
ftp 112532 ( 0.75%) 47251163 ( 0.49%) 419.89
pop3 12493 ( 0.08%) 5442599 ( 0.06%) 435.65
imap 5359 ( 0.04%) 1695538 ( 0.02%) 316.39
telnet 790 ( 0.01%) 57970 ( 0.00%) 73.38
ssh 1348162 ( 8.95%) 530771769 ( 5.45%) 393.70
dns 1882 ( 0.01%) 139118 ( 0.00%) 73.92
bgp 189 ( 0.00%) 56604 ( 0.00%) 299.49
napster 81 ( 0.00%) 25752 ( 0.00%) 317.93
realaud 137 ( 0.00%) 59121 ( 0.00%) 431.54
rtsp 245353 ( 1.63%) 278446746 ( 2.86%) 1134.88
icecast 21419 ( 0.14%) 8577628 ( 0.09%) 400.47
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 3381048 ( 22.45%) 2377943244 ( 24.44%) 703.32
udp 1626984 ( 10.80%) 315831520 ( 3.25%) 194.12
dns 888452 ( 5.90%) 131799938 ( 1.35%) 148.35
realaud 27998 ( 0.19%) 18828057 ( 0.19%) 672.48
halflif 14 ( 0.00%) 2311 ( 0.00%) 165.07
starcra 53 ( 0.00%) 6298 ( 0.00%) 118.83
everque 36 ( 0.00%) 6059 ( 0.00%) 168.31
unreal 10 ( 0.00%) 1116 ( 0.00%) 111.60
quake 23 ( 0.00%) 5357 ( 0.00%) 232.91
cuseeme 12 ( 0.00%) 1241 ( 0.00%) 103.42
other 710372 ( 4.72%) 165176029 ( 1.70%) 232.52
icmp 352734 ( 2.34%) 33219712 ( 0.34%) 94.18
ipip 362 ( 0.00%) 44974 ( 0.00%) 124.24
ip6 1113 ( 0.01%) 154783 ( 0.00%) 139.07
other 152343 ( 1.01%) 27831158 ( 0.29%) 182.69
frag 1277 ( 0.01%) 1064493 ( 0.01%) 833.59
ip6 31422 ( 0.21%) 9335909 ( 0.10%) 297.11
tcp6 5492 ( 0.04%) 914714 ( 0.01%) 166.55
http(s) 260 ( 0.00%) 249421 ( 0.00%) 959.31
http(c) 2399 ( 0.02%) 223793 ( 0.00%) 93.29
smtp 562 ( 0.00%) 182025 ( 0.00%) 323.89
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2167 ( 0.01%) 249190 ( 0.00%) 114.99
udp6 16946 ( 0.11%) 3146566 ( 0.03%) 185.68
dns 14911 ( 0.10%) 2685500 ( 0.03%) 180.10
unreal 1 ( 0.00%) 564 ( 0.00%) 564.00
other 2034 ( 0.01%) 460502 ( 0.00%) 226.40
icmp6 5472 ( 0.04%) 716805 ( 0.01%) 131.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3482 ( 0.02%) 4553744 ( 0.05%) 1307.80
tcpdump file: 200803181300.dump.gz (381.64 MB)