Traffic Trace Info
DumpFile: -
Id: 200803181545
StartTime: Tue Mar 18 15:45:00 2008
EndTime: Tue Mar 18 16:00:00 2008
TotalTime: 899.75 seconds
TotalCapSize: 943.69MB CapLen: 96 bytes
# of packets: 17081634 (11123.05MB)
AvgRate: 103.72Mbps stddev:15.80M
IP flow (unique src/dst pair) Information
# of flows: 676309 (avg. 25.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 4.4% 3.0% 2.8% 2.6% 2.4% 1.8% 1.6% 1.5% 1.0%
IP address Information
# of IPv4 addresses: 352123
Top 10 bandwidth usage (bytes/total in %):
17.4% 6.5% 6.5% 4.9% 4.4% 3.9% 3.8% 3.7% 3.5% 3.3%
# of IPv6 addresses: 2092
Top 10 bandwidth usage (bytes/total in %):
51.7% 46.8% 7.2% 4.9% 4.2% 3.6% 3.5% 3.4% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181545.pktlen.png)
detailed numbers
[ 32- 63]: 3540873
[ 64- 127]: 4547601
[ 128- 255]: 965536
[ 256- 511]: 453686
[ 512- 1023]: 457569
[ 1024- 2047]: 7116369
Protocol Breakdown
![[protocol breakdown chart]](200803181545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17081634 (100.00%) 11663367007 (100.00%) 682.80
ip 17049162 ( 99.81%) 11653688552 ( 99.92%) 683.53
tcp 14674007 ( 85.91%) 11215707577 ( 96.16%) 764.32
http(s) 5947313 ( 34.82%) 7837691387 ( 67.20%) 1317.85
http(c) 3738088 ( 21.88%) 792056871 ( 6.79%) 211.89
squid 539370 ( 3.16%) 379491113 ( 3.25%) 703.58
smtp 633774 ( 3.71%) 112570974 ( 0.97%) 177.62
ftp 108668 ( 0.64%) 61359293 ( 0.53%) 564.65
pop3 23926 ( 0.14%) 16014115 ( 0.14%) 669.32
imap 6561 ( 0.04%) 3201069 ( 0.03%) 487.89
telnet 393 ( 0.00%) 33136 ( 0.00%) 84.32
ssh 1226916 ( 7.18%) 452667738 ( 3.88%) 368.95
dns 2056 ( 0.01%) 162860 ( 0.00%) 79.21
bgp 202 ( 0.00%) 61737 ( 0.00%) 305.63
napster 43 ( 0.00%) 6842 ( 0.00%) 159.12
realaud 139 ( 0.00%) 59087 ( 0.00%) 425.09
rtsp 357173 ( 2.09%) 378803187 ( 3.25%) 1060.56
icecast 23318 ( 0.14%) 13076075 ( 0.11%) 560.77
hotline 22 ( 0.00%) 2644 ( 0.00%) 120.18
other 2066043 ( 12.10%) 1168449329 ( 10.02%) 565.55
udp 1668738 ( 9.77%) 340174486 ( 2.92%) 203.85
dns 1011147 ( 5.92%) 147763496 ( 1.27%) 146.13
realaud 19297 ( 0.11%) 13243975 ( 0.11%) 686.32
halflif 21 ( 0.00%) 4765 ( 0.00%) 226.90
starcra 35 ( 0.00%) 6759 ( 0.00%) 193.11
everque 44 ( 0.00%) 7033 ( 0.00%) 159.84
unreal 21 ( 0.00%) 5048 ( 0.00%) 240.38
quake 2309 ( 0.01%) 399374 ( 0.00%) 172.96
cuseeme 5 ( 0.00%) 714 ( 0.00%) 142.80
other 635844 ( 3.72%) 178738255 ( 1.53%) 281.10
icmp 449135 ( 2.63%) 40883655 ( 0.35%) 91.03
ipip 332 ( 0.00%) 40216 ( 0.00%) 121.13
ip6 1050 ( 0.01%) 144610 ( 0.00%) 137.72
other 255900 ( 1.50%) 56738008 ( 0.49%) 221.72
frag 1242 ( 0.01%) 1046458 ( 0.01%) 842.56
ip6 32472 ( 0.19%) 9678455 ( 0.08%) 298.06
tcp6 5298 ( 0.03%) 1036824 ( 0.01%) 195.70
http(s) 108 ( 0.00%) 105155 ( 0.00%) 973.66
http(c) 1469 ( 0.01%) 141094 ( 0.00%) 96.05
smtp 1364 ( 0.01%) 485392 ( 0.00%) 355.86
pop3 49 ( 0.00%) 4464 ( 0.00%) 91.10
ssh 132 ( 0.00%) 54876 ( 0.00%) 415.73
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2115 ( 0.01%) 239520 ( 0.00%) 113.25
udp6 17797 ( 0.10%) 3335490 ( 0.03%) 187.42
dns 15728 ( 0.09%) 2843789 ( 0.02%) 180.81
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
unreal 1 ( 0.00%) 564 ( 0.00%) 564.00
other 2067 ( 0.01%) 491000 ( 0.00%) 237.54
icmp6 5871 ( 0.03%) 765372 ( 0.01%) 130.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3476 ( 0.02%) 4536689 ( 0.04%) 1305.15
tcpdump file: 200803181545.dump.gz (423.95 MB)