Traffic Trace Info
DumpFile: -
Id: 200803181600
StartTime: Tue Mar 18 16:00:00 2008
EndTime: Tue Mar 18 16:15:00 2008
TotalTime: 900.12 seconds
TotalCapSize: 932.76MB CapLen: 96 bytes
# of packets: 16730143 (10861.88MB)
AvgRate: 101.20Mbps stddev:18.71M
IP flow (unique src/dst pair) Information
# of flows: 708088 (avg. 23.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.4% 2.6% 2.1% 2.0% 1.7% 1.7% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 384733
Top 10 bandwidth usage (bytes/total in %):
5.0% 4.5% 4.2% 3.9% 3.8% 3.6% 3.5% 3.4% 3.4% 3.0%
# of IPv6 addresses: 2196
Top 10 bandwidth usage (bytes/total in %):
46.7% 42.7% 6.4% 6.1% 5.9% 4.1% 3.7% 3.4% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181600.pktlen.png)
detailed numbers
[ 32- 63]: 3273320
[ 64- 127]: 4654330
[ 128- 255]: 894586
[ 256- 511]: 515129
[ 512- 1023]: 446104
[ 1024- 2047]: 6946674
Protocol Breakdown
![[protocol breakdown chart]](200803181600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16730143 (100.00%) 11389505994 (100.00%) 680.78
ip 16693507 ( 99.78%) 11378778644 ( 99.91%) 681.63
tcp 14230517 ( 85.06%) 10943251374 ( 96.08%) 769.00
http(s) 5337321 ( 31.90%) 6905880379 ( 60.63%) 1293.89
http(c) 3478911 ( 20.79%) 1024250630 ( 8.99%) 294.42
squid 607871 ( 3.63%) 436496733 ( 3.83%) 718.07
smtp 602657 ( 3.60%) 126341388 ( 1.11%) 209.64
ftp 111011 ( 0.66%) 61414319 ( 0.54%) 553.23
pop3 11598 ( 0.07%) 5021698 ( 0.04%) 432.98
imap 6576 ( 0.04%) 2677511 ( 0.02%) 407.16
telnet 697 ( 0.00%) 51072 ( 0.00%) 73.27
ssh 1304129 ( 7.80%) 528987851 ( 4.64%) 405.63
dns 2559 ( 0.02%) 195012 ( 0.00%) 76.21
bgp 210 ( 0.00%) 63589 ( 0.00%) 302.80
napster 19 ( 0.00%) 3474 ( 0.00%) 182.84
realaud 49 ( 0.00%) 6789 ( 0.00%) 138.55
rtsp 344555 ( 2.06%) 371208728 ( 3.26%) 1077.36
icecast 27088 ( 0.16%) 23423856 ( 0.21%) 864.73
other 2395263 ( 14.32%) 1457226719 ( 12.79%) 608.38
udp 1768354 ( 10.57%) 344178363 ( 3.02%) 194.63
dns 1044870 ( 6.25%) 153882093 ( 1.35%) 147.27
realaud 18739 ( 0.11%) 12895216 ( 0.11%) 688.15
halflif 11 ( 0.00%) 1949 ( 0.00%) 177.18
starcra 30 ( 0.00%) 4843 ( 0.00%) 161.43
everque 42 ( 0.00%) 5788 ( 0.00%) 137.81
unreal 13 ( 0.00%) 2445 ( 0.00%) 188.08
quake 4863 ( 0.03%) 853011 ( 0.01%) 175.41
cuseeme 6 ( 0.00%) 1804 ( 0.00%) 300.67
other 699765 ( 4.18%) 176528549 ( 1.55%) 252.27
icmp 525998 ( 3.14%) 46256908 ( 0.41%) 87.94
ipip 358 ( 0.00%) 45670 ( 0.00%) 127.57
ip6 1189 ( 0.01%) 187937 ( 0.00%) 158.06
other 167091 ( 1.00%) 44858392 ( 0.39%) 268.47
frag 1432 ( 0.01%) 1173400 ( 0.01%) 819.41
ip6 36636 ( 0.22%) 10727350 ( 0.09%) 292.81
tcp6 4475 ( 0.03%) 630451 ( 0.01%) 140.88
http(c) 1468 ( 0.01%) 148139 ( 0.00%) 100.91
smtp 543 ( 0.00%) 209475 ( 0.00%) 385.77
pop3 56 ( 0.00%) 5088 ( 0.00%) 90.86
dns 27 ( 0.00%) 2573 ( 0.00%) 95.30
bgp 70 ( 0.00%) 7644 ( 0.00%) 109.20
other 2311 ( 0.01%) 257532 ( 0.00%) 111.44
udp6 22983 ( 0.14%) 4755560 ( 0.04%) 206.92
dns 20811 ( 0.12%) 4209834 ( 0.04%) 202.29
everque 2 ( 0.00%) 274 ( 0.00%) 137.00
unreal 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2169 ( 0.01%) 545315 ( 0.00%) 251.41
icmp6 5648 ( 0.03%) 759705 ( 0.01%) 134.51
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3499 ( 0.02%) 4577418 ( 0.04%) 1308.21
tcpdump file: 200803181600.dump.gz (423.76 MB)