Traffic Trace Info
DumpFile: -
Id: 200803181430
StartTime: Tue Mar 18 14:30:01 2008
EndTime: Tue Mar 18 14:45:00 2008
TotalTime: 899.33 seconds
TotalCapSize: 886.98MB CapLen: 96 bytes
# of packets: 16021195 (10786.15MB)
AvgRate: 100.60Mbps stddev:22.23M
IP flow (unique src/dst pair) Information
# of flows: 569557 (avg. 28.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.3% 3.9% 2.9% 2.9% 2.7% 2.4% 1.6% 1.6% 1.2%
IP address Information
# of IPv4 addresses: 303195
Top 10 bandwidth usage (bytes/total in %):
9.2% 7.2% 6.2% 4.4% 4.1% 4.0% 4.0% 3.8% 3.6% 3.3%
# of IPv6 addresses: 2094
Top 10 bandwidth usage (bytes/total in %):
91.0% 89.2% 4.1% 3.6% 1.8% 0.5% 0.4% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181430.pktlen.png)
detailed numbers
[ 32- 63]: 3278242
[ 64- 127]: 4157395
[ 128- 255]: 870109
[ 256- 511]: 422705
[ 512- 1023]: 417814
[ 1024- 2047]: 6874930
Protocol Breakdown
![[protocol breakdown chart]](200803181430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16021195 (100.00%) 11310093742 (100.00%) 705.95
ip 15939372 ( 99.49%) 11229533624 ( 99.29%) 704.52
tcp 13700299 ( 85.51%) 10811014224 ( 95.59%) 789.11
http(s) 5139700 ( 32.08%) 6660955015 ( 58.89%) 1295.98
http(c) 2750990 ( 17.17%) 732147655 ( 6.47%) 266.14
squid 505218 ( 3.15%) 311779461 ( 2.76%) 617.12
smtp 574819 ( 3.59%) 101311332 ( 0.90%) 176.25
ftp 70572 ( 0.44%) 23566556 ( 0.21%) 333.94
pop3 16351 ( 0.10%) 9135957 ( 0.08%) 558.74
imap 5330 ( 0.03%) 1511338 ( 0.01%) 283.55
telnet 365 ( 0.00%) 31356 ( 0.00%) 85.91
ssh 1246087 ( 7.78%) 496015902 ( 4.39%) 398.06
dns 3773 ( 0.02%) 1891287 ( 0.02%) 501.27
bgp 178 ( 0.00%) 48408 ( 0.00%) 271.96
napster 22 ( 0.00%) 3415 ( 0.00%) 155.23
realaud 20 ( 0.00%) 2332 ( 0.00%) 116.60
rtsp 407677 ( 2.54%) 421064394 ( 3.72%) 1032.84
icecast 35183 ( 0.22%) 26546831 ( 0.23%) 754.54
hotline 10 ( 0.00%) 1124 ( 0.00%) 112.40
other 2944002 ( 18.38%) 2025001741 ( 17.90%) 687.84
udp 1628701 ( 10.17%) 335183330 ( 2.96%) 205.80
dns 894249 ( 5.58%) 133744714 ( 1.18%) 149.56
realaud 19290 ( 0.12%) 13239027 ( 0.12%) 686.32
halflif 7 ( 0.00%) 876 ( 0.00%) 125.14
starcra 27 ( 0.00%) 5274 ( 0.00%) 195.33
everque 24680 ( 0.15%) 6595313 ( 0.06%) 267.23
unreal 25 ( 0.00%) 3935 ( 0.00%) 157.40
quake 10 ( 0.00%) 904 ( 0.00%) 90.40
cuseeme 3 ( 0.00%) 594 ( 0.00%) 198.00
other 690397 ( 4.31%) 181589235 ( 1.61%) 263.02
icmp 417185 ( 2.60%) 37951733 ( 0.34%) 90.97
ipip 336 ( 0.00%) 42932 ( 0.00%) 127.77
ip6 1048 ( 0.01%) 146394 ( 0.00%) 139.69
other 191803 ( 1.20%) 45195011 ( 0.40%) 235.63
frag 6216 ( 0.04%) 4944451 ( 0.04%) 795.44
ip6 81823 ( 0.51%) 80560118 ( 0.71%) 984.57
tcp6 59809 ( 0.37%) 74199288 ( 0.66%) 1240.60
http(s) 52927 ( 0.33%) 73421774 ( 0.65%) 1387.23
http(c) 1467 ( 0.01%) 143530 ( 0.00%) 97.84
smtp 235 ( 0.00%) 110212 ( 0.00%) 468.99
pop3 46 ( 0.00%) 4232 ( 0.00%) 92.00
bgp 73 ( 0.00%) 8217 ( 0.00%) 112.56
other 5061 ( 0.03%) 511323 ( 0.00%) 101.03
udp6 14359 ( 0.09%) 2698622 ( 0.02%) 187.94
dns 12327 ( 0.08%) 2194228 ( 0.02%) 178.00
everque 3 ( 0.00%) 420 ( 0.00%) 140.00
other 2029 ( 0.01%) 503974 ( 0.00%) 248.39
icmp6 5375 ( 0.03%) 741248 ( 0.01%) 137.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2250 ( 0.01%) 2916880 ( 0.03%) 1296.39
tcpdump file: 200803181430.dump.gz (397.27 MB)