Traffic Trace Info
DumpFile: -
Id: 200803181330
StartTime: Tue Mar 18 13:30:00 2008
EndTime: Tue Mar 18 13:45:00 2008
TotalTime: 900.26 seconds
TotalCapSize: 864.94MB CapLen: 96 bytes
# of packets: 15502901 (9313.49MB)
AvgRate: 86.74Mbps stddev:19.19M
IP flow (unique src/dst pair) Information
# of flows: 559170 (avg. 27.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.0% 2.0% 1.6% 1.5% 1.3% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 304063
Top 10 bandwidth usage (bytes/total in %):
6.4% 5.2% 5.0% 4.9% 4.3% 3.9% 3.6% 3.5% 3.0% 3.0%
# of IPv6 addresses: 2298
Top 10 bandwidth usage (bytes/total in %):
53.2% 48.8% 6.0% 4.2% 4.2% 3.5% 3.3% 3.2% 2.2% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181330.pktlen.png)
detailed numbers
[ 32- 63]: 2908195
[ 64- 127]: 4976163
[ 128- 255]: 951975
[ 256- 511]: 446128
[ 512- 1023]: 443154
[ 1024- 2047]: 5777286
Protocol Breakdown
![[protocol breakdown chart]](200803181330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15502901 (100.00%) 9765897501 (100.00%) 629.94
ip 15474062 ( 99.81%) 9756642792 ( 99.91%) 630.52
tcp 12370630 ( 79.80%) 9056318608 ( 92.73%) 732.08
http(s) 3908940 ( 25.21%) 5076327758 ( 51.98%) 1298.65
http(c) 2944085 ( 18.99%) 633320941 ( 6.49%) 215.12
squid 581215 ( 3.75%) 438473604 ( 4.49%) 754.41
smtp 567753 ( 3.66%) 104164740 ( 1.07%) 183.47
ftp 101065 ( 0.65%) 43565356 ( 0.45%) 431.06
pop3 12459 ( 0.08%) 5584870 ( 0.06%) 448.26
imap 7093 ( 0.05%) 3438157 ( 0.04%) 484.73
telnet 799 ( 0.01%) 59055 ( 0.00%) 73.91
ssh 1307885 ( 8.44%) 539951890 ( 5.53%) 412.84
dns 3463 ( 0.02%) 1855054 ( 0.02%) 535.68
bgp 184 ( 0.00%) 51668 ( 0.00%) 280.80
napster 64 ( 0.00%) 17136 ( 0.00%) 267.75
realaud 13 ( 0.00%) 1380 ( 0.00%) 106.15
rtsp 555600 ( 3.58%) 614527687 ( 6.29%) 1106.06
icecast 19283 ( 0.12%) 8457654 ( 0.09%) 438.61
hotline 25 ( 0.00%) 2190 ( 0.00%) 87.60
other 2360700 ( 15.23%) 1586519228 ( 16.25%) 672.05
udp 2004547 ( 12.93%) 592968148 ( 6.07%) 295.81
dns 819252 ( 5.28%) 124203588 ( 1.27%) 151.61
realaud 26702 ( 0.17%) 17699678 ( 0.18%) 662.86
halflif 9 ( 0.00%) 852 ( 0.00%) 94.67
starcra 22 ( 0.00%) 4311 ( 0.00%) 195.95
everque 9904 ( 0.06%) 2588600 ( 0.03%) 261.37
unreal 12 ( 0.00%) 2861 ( 0.00%) 238.42
quake 8 ( 0.00%) 1045 ( 0.00%) 130.62
cuseeme 7 ( 0.00%) 782 ( 0.00%) 111.71
other 1148352 ( 7.41%) 448444389 ( 4.59%) 390.51
icmp 884640 ( 5.71%) 70892163 ( 0.73%) 80.14
ipip 346 ( 0.00%) 43296 ( 0.00%) 125.13
ip6 1092 ( 0.01%) 153163 ( 0.00%) 140.26
other 212807 ( 1.37%) 36267414 ( 0.37%) 170.42
frag 5295 ( 0.03%) 4108988 ( 0.04%) 776.01
ip6 28839 ( 0.19%) 9254709 ( 0.09%) 320.91
tcp6 3953 ( 0.03%) 855169 ( 0.01%) 216.33
http(s) 406 ( 0.00%) 322397 ( 0.00%) 794.08
http(c) 1479 ( 0.01%) 146533 ( 0.00%) 99.08
smtp 363 ( 0.00%) 180663 ( 0.00%) 497.69
pop3 35 ( 0.00%) 3258 ( 0.00%) 93.09
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 1605 ( 0.01%) 195538 ( 0.00%) 121.83
udp6 15968 ( 0.10%) 3130768 ( 0.03%) 196.07
dns 13518 ( 0.09%) 2370501 ( 0.02%) 175.36
realaud 1 ( 0.00%) 516 ( 0.00%) 516.00
everque 2 ( 0.00%) 276 ( 0.00%) 138.00
other 2447 ( 0.02%) 759475 ( 0.01%) 310.37
icmp6 5423 ( 0.03%) 738683 ( 0.01%) 136.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3465 ( 0.02%) 4526009 ( 0.05%) 1306.21
tcpdump file: 200803181330.dump.gz (385.58 MB)