Traffic Trace Info
DumpFile: -
Id: 200803181530
StartTime: Tue Mar 18 15:30:00 2008
EndTime: Tue Mar 18 15:45:00 2008
TotalTime: 900.13 seconds
TotalCapSize: 1007.82MB CapLen: 96 bytes
# of packets: 18334940 (12713.62MB)
AvgRate: 118.50Mbps stddev:25.11M
IP flow (unique src/dst pair) Information
# of flows: 633190 (avg. 28.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 4.0% 3.7% 2.9% 2.6% 1.9% 1.6% 1.4% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 319649
Top 10 bandwidth usage (bytes/total in %):
21.9% 7.2% 4.6% 4.4% 4.3% 3.7% 3.6% 3.5% 3.0% 3.0%
# of IPv6 addresses: 2688
Top 10 bandwidth usage (bytes/total in %):
48.3% 43.6% 5.9% 5.6% 4.2% 4.1% 3.3% 3.2% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181530.pktlen.png)
detailed numbers
[ 32- 63]: 3928674
[ 64- 127]: 4347165
[ 128- 255]: 943602
[ 256- 511]: 443840
[ 512- 1023]: 423906
[ 1024- 2047]: 8247753
Protocol Breakdown
![[protocol breakdown chart]](200803181530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18334940 (100.00%) 13331201488 (100.00%) 727.09
ip 18297826 ( 99.80%) 13320908705 ( 99.92%) 728.00
tcp 16086395 ( 87.74%) 12896649255 ( 96.74%) 801.71
http(s) 7001459 ( 38.19%) 9414397357 ( 70.62%) 1344.63
http(c) 4045400 ( 22.06%) 757559905 ( 5.68%) 187.26
squid 676834 ( 3.69%) 500533883 ( 3.75%) 739.52
smtp 597013 ( 3.26%) 135992226 ( 1.02%) 227.79
ftp 95509 ( 0.52%) 54375885 ( 0.41%) 569.33
pop3 34969 ( 0.19%) 27356803 ( 0.21%) 782.32
imap 7920 ( 0.04%) 4743367 ( 0.04%) 598.91
telnet 611 ( 0.00%) 46156 ( 0.00%) 75.54
ssh 1333287 ( 7.27%) 533316878 ( 4.00%) 400.00
dns 3855 ( 0.02%) 1893643 ( 0.01%) 491.22
bgp 205 ( 0.00%) 60019 ( 0.00%) 292.78
napster 5 ( 0.00%) 370 ( 0.00%) 74.00
realaud 5 ( 0.00%) 1320 ( 0.00%) 264.00
rtsp 236788 ( 1.29%) 246601787 ( 1.85%) 1041.45
icecast 19674 ( 0.11%) 9119359 ( 0.07%) 463.52
hotline 4 ( 0.00%) 370 ( 0.00%) 92.50
other 2032853 ( 11.09%) 1210649687 ( 9.08%) 595.54
udp 1599908 ( 8.73%) 327363534 ( 2.46%) 204.61
dns 945309 ( 5.16%) 141486230 ( 1.06%) 149.67
realaud 19343 ( 0.11%) 13272246 ( 0.10%) 686.15
halflif 22 ( 0.00%) 3726 ( 0.00%) 169.36
starcra 25 ( 0.00%) 5493 ( 0.00%) 219.72
everque 43 ( 0.00%) 6735 ( 0.00%) 156.63
unreal 17 ( 0.00%) 3338 ( 0.00%) 196.35
quake 1757 ( 0.01%) 309298 ( 0.00%) 176.04
other 633380 ( 3.45%) 172271627 ( 1.29%) 271.99
icmp 359035 ( 1.96%) 34040576 ( 0.26%) 94.81
ipip 357 ( 0.00%) 46134 ( 0.00%) 129.23
ip6 1071 ( 0.01%) 147037 ( 0.00%) 137.29
other 251060 ( 1.37%) 62662169 ( 0.47%) 249.59
frag 7992 ( 0.04%) 6329010 ( 0.05%) 791.92
ip6 37114 ( 0.20%) 10292783 ( 0.08%) 277.33
tcp6 8399 ( 0.05%) 1122418 ( 0.01%) 133.64
http(s) 185 ( 0.00%) 180414 ( 0.00%) 975.21
http(c) 5416 ( 0.03%) 504507 ( 0.00%) 93.15
smtp 493 ( 0.00%) 176006 ( 0.00%) 357.01
pop3 53 ( 0.00%) 4838 ( 0.00%) 91.28
dns 22 ( 0.00%) 3597 ( 0.00%) 163.50
bgp 73 ( 0.00%) 8153 ( 0.00%) 111.68
other 2157 ( 0.01%) 244903 ( 0.00%) 113.54
udp6 18606 ( 0.10%) 3796200 ( 0.03%) 204.03
dns 15348 ( 0.08%) 2675413 ( 0.02%) 174.32
everque 4 ( 0.00%) 598 ( 0.00%) 149.50
other 3254 ( 0.02%) 1120189 ( 0.01%) 344.25
icmp6 6632 ( 0.04%) 880510 ( 0.01%) 132.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3447 ( 0.02%) 4489575 ( 0.03%) 1302.46
tcpdump file: 200803181530.dump.gz (448.86 MB)