Traffic Trace Info
DumpFile: -
Id: 200803181500
StartTime: Tue Mar 18 15:00:01 2008
EndTime: Tue Mar 18 15:15:01 2008
TotalTime: 899.79 seconds
TotalCapSize: 943.95MB CapLen: 96 bytes
# of packets: 16965847 (11508.37MB)
AvgRate: 107.30Mbps stddev:21.13M
IP flow (unique src/dst pair) Information
# of flows: 616160 (avg. 27.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 2.7% 2.7% 2.5% 2.2% 1.9% 1.7% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 337753
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.1% 6.4% 4.8% 3.6% 3.4% 3.2% 3.0% 2.9% 2.8%
# of IPv6 addresses: 2561
Top 10 bandwidth usage (bytes/total in %):
92.4% 92.4% 3.7% 3.2% 0.5% 0.5% 0.3% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181500.pktlen.png)
detailed numbers
[ 32- 63]: 3288098
[ 64- 127]: 4536706
[ 128- 255]: 874378
[ 256- 511]: 451299
[ 512- 1023]: 477212
[ 1024- 2047]: 7338154
Protocol Breakdown
![[protocol breakdown chart]](200803181500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16965847 (100.00%) 12067395353 (100.00%) 711.28
ip 16859241 ( 99.37%) 11955219236 ( 99.07%) 709.12
tcp 14468893 ( 85.28%) 11505507902 ( 95.34%) 795.19
http(s) 5960099 ( 35.13%) 7875923729 ( 65.27%) 1321.44
http(c) 3549016 ( 20.92%) 875780333 ( 7.26%) 246.77
squid 398356 ( 2.35%) 250710889 ( 2.08%) 629.36
smtp 518332 ( 3.06%) 92153394 ( 0.76%) 177.79
ftp 96330 ( 0.57%) 43593436 ( 0.36%) 452.54
pop3 13885 ( 0.08%) 7038632 ( 0.06%) 506.92
imap 5905 ( 0.03%) 2474733 ( 0.02%) 419.09
telnet 767 ( 0.00%) 55936 ( 0.00%) 72.93
ssh 1215325 ( 7.16%) 451799595 ( 3.74%) 371.75
dns 1942 ( 0.01%) 171937 ( 0.00%) 88.54
bgp 196 ( 0.00%) 68487 ( 0.00%) 349.42
napster 24 ( 0.00%) 4122 ( 0.00%) 171.75
realaud 1579 ( 0.01%) 608225 ( 0.01%) 385.20
rtsp 230103 ( 1.36%) 247615153 ( 2.05%) 1076.11
icecast 36217 ( 0.21%) 26843112 ( 0.22%) 741.17
other 2440812 ( 14.39%) 1630665889 ( 13.51%) 668.08
udp 1683169 ( 9.92%) 344719507 ( 2.86%) 204.80
dns 882788 ( 5.20%) 132141688 ( 1.10%) 149.69
realaud 19297 ( 0.11%) 13244885 ( 0.11%) 686.37
halflif 38 ( 0.00%) 8381 ( 0.00%) 220.55
starcra 38 ( 0.00%) 7552 ( 0.00%) 198.74
everque 31 ( 0.00%) 4157 ( 0.00%) 134.10
unreal 24 ( 0.00%) 7415 ( 0.00%) 308.96
quake 10735 ( 0.06%) 1865413 ( 0.02%) 173.77
cuseeme 4 ( 0.00%) 330 ( 0.00%) 82.50
other 770170 ( 4.54%) 197431201 ( 1.64%) 256.35
icmp 465361 ( 2.74%) 43096293 ( 0.36%) 92.61
ipip 360 ( 0.00%) 46640 ( 0.00%) 129.56
ip6 1076 ( 0.01%) 149317 ( 0.00%) 138.77
other 240382 ( 1.42%) 61699577 ( 0.51%) 256.67
frag 8381 ( 0.05%) 6662678 ( 0.06%) 794.97
ip6 106604 ( 0.63%) 112175997 ( 0.93%) 1052.27
tcp6 80506 ( 0.47%) 104367890 ( 0.86%) 1296.40
http(s) 75184 ( 0.44%) 103619522 ( 0.86%) 1378.21
http(c) 2003 ( 0.01%) 211474 ( 0.00%) 105.58
smtp 395 ( 0.00%) 147369 ( 0.00%) 373.09
pop3 36 ( 0.00%) 3300 ( 0.00%) 91.67
ssh 274 ( 0.00%) 83830 ( 0.00%) 305.95
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 86 ( 0.00%) 10396 ( 0.00%) 120.88
other 2521 ( 0.01%) 291364 ( 0.00%) 115.57
udp6 17099 ( 0.10%) 3355596 ( 0.03%) 196.25
dns 14042 ( 0.08%) 2520743 ( 0.02%) 179.51
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 3056 ( 0.02%) 834737 ( 0.01%) 273.15
icmp6 6176 ( 0.04%) 814875 ( 0.01%) 131.94
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2792 ( 0.02%) 3633420 ( 0.03%) 1301.37
tcpdump file: 200803181500.dump.gz (420.41 MB)