Traffic Trace Info
DumpFile: -
Id: 200803181445
StartTime: Tue Mar 18 14:45:00 2008
EndTime: Tue Mar 18 15:00:01 2008
TotalTime: 900.58 seconds
TotalCapSize: 884.60MB CapLen: 96 bytes
# of packets: 16056547 (10459.77MB)
AvgRate: 97.42Mbps stddev:16.97M
IP flow (unique src/dst pair) Information
# of flows: 677134 (avg. 23.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.2% 4.1% 2.7% 1.8% 1.7% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 364697
Top 10 bandwidth usage (bytes/total in %):
10.4% 5.3% 4.3% 4.3% 4.2% 4.2% 4.1% 3.8% 3.7% 3.6%
# of IPv6 addresses: 2459
Top 10 bandwidth usage (bytes/total in %):
91.1% 91.1% 4.3% 3.9% 0.5% 0.5% 0.5% 0.3% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181445.pktlen.png)
detailed numbers
[ 32- 63]: 3580639
[ 64- 127]: 4166148
[ 128- 255]: 826154
[ 256- 511]: 415823
[ 512- 1023]: 418909
[ 1024- 2047]: 6648874
Protocol Breakdown
![[protocol breakdown chart]](200803181445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16056547 (100.00%) 10967865994 (100.00%) 683.08
ip 15940378 ( 99.28%) 10852462119 ( 98.95%) 680.82
tcp 13333569 ( 83.04%) 10349906163 ( 94.37%) 776.23
http(s) 4514798 ( 28.12%) 5868065568 ( 53.50%) 1299.74
http(c) 2761875 ( 17.20%) 642357544 ( 5.86%) 232.58
squid 548623 ( 3.42%) 387474017 ( 3.53%) 706.27
smtp 622887 ( 3.88%) 146814276 ( 1.34%) 235.70
ftp 69662 ( 0.43%) 24240397 ( 0.22%) 347.97
pop3 10396 ( 0.06%) 3413483 ( 0.03%) 328.35
imap 5551 ( 0.03%) 1940058 ( 0.02%) 349.50
telnet 513 ( 0.00%) 41006 ( 0.00%) 79.93
ssh 1277951 ( 7.96%) 563404811 ( 5.14%) 440.87
dns 1886 ( 0.01%) 151864 ( 0.00%) 80.52
bgp 191 ( 0.00%) 52894 ( 0.00%) 276.93
napster 89 ( 0.00%) 31907 ( 0.00%) 358.51
realaud 16 ( 0.00%) 1953 ( 0.00%) 122.06
rtsp 772203 ( 4.81%) 796742859 ( 7.26%) 1031.78
icecast 36359 ( 0.23%) 26476158 ( 0.24%) 728.19
hotline 17 ( 0.00%) 2640 ( 0.00%) 155.29
other 2710551 ( 16.88%) 1888694668 ( 17.22%) 696.79
udp 1960734 ( 12.21%) 414321888 ( 3.78%) 211.31
dns 849113 ( 5.29%) 128284817 ( 1.17%) 151.08
realaud 19327 ( 0.12%) 13263749 ( 0.12%) 686.28
halflif 8 ( 0.00%) 946 ( 0.00%) 118.25
starcra 26 ( 0.00%) 4896 ( 0.00%) 188.31
everque 16 ( 0.00%) 2311 ( 0.00%) 144.44
unreal 25 ( 0.00%) 3155 ( 0.00%) 126.20
quake 10 ( 0.00%) 1172 ( 0.00%) 117.20
cuseeme 2 ( 0.00%) 199 ( 0.00%) 99.50
other 1092189 ( 6.80%) 272756251 ( 2.49%) 249.73
icmp 513669 ( 3.20%) 49121638 ( 0.45%) 95.63
ipip 329 ( 0.00%) 39466 ( 0.00%) 119.96
ipsec 109 ( 0.00%) 100886 ( 0.00%) 925.56
ip6 1037 ( 0.01%) 140360 ( 0.00%) 135.35
other 130931 ( 0.82%) 38831718 ( 0.35%) 296.58
frag 22264 ( 0.14%) 17591841 ( 0.16%) 790.15
ip6 116169 ( 0.72%) 115403875 ( 1.05%) 993.41
tcp6 89939 ( 0.56%) 106509300 ( 0.97%) 1184.24
http(s) 75807 ( 0.47%) 105143299 ( 0.96%) 1386.99
http(c) 8716 ( 0.05%) 765485 ( 0.01%) 87.83
smtp 194 ( 0.00%) 73947 ( 0.00%) 381.17
pop3 57 ( 0.00%) 5194 ( 0.00%) 91.12
bgp 78 ( 0.00%) 8965 ( 0.00%) 114.94
other 5087 ( 0.03%) 512410 ( 0.00%) 100.73
udp6 17184 ( 0.11%) 3596107 ( 0.03%) 209.27
dns 14474 ( 0.09%) 2733220 ( 0.02%) 188.84
everque 6 ( 0.00%) 1168 ( 0.00%) 194.67
other 2704 ( 0.02%) 861719 ( 0.01%) 318.68
icmp6 5534 ( 0.03%) 745165 ( 0.01%) 134.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3482 ( 0.02%) 4549223 ( 0.04%) 1306.50
tcpdump file: 200803181445.dump.gz (397.38 MB)