Traffic Trace Info
DumpFile: -
Id: 200803181615
StartTime: Tue Mar 18 16:15:00 2008
EndTime: Tue Mar 18 16:30:00 2008
TotalTime: 899.98 seconds
TotalCapSize: 971.42MB CapLen: 96 bytes
# of packets: 17518397 (11889.12MB)
AvgRate: 110.82Mbps stddev:19.48M
IP flow (unique src/dst pair) Information
# of flows: 703100 (avg. 24.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 4.1% 2.6% 2.2% 2.1% 1.8% 1.5% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 371406
Top 10 bandwidth usage (bytes/total in %):
5.6% 4.5% 4.4% 4.3% 4.2% 4.2% 4.1% 4.1% 3.8% 3.4%
# of IPv6 addresses: 2322
Top 10 bandwidth usage (bytes/total in %):
45.7% 42.0% 5.2% 4.6% 4.1% 3.2% 3.0% 3.0% 3.0% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181615.pktlen.png)
detailed numbers
[ 32- 63]: 3269510
[ 64- 127]: 4712451
[ 128- 255]: 934734
[ 256- 511]: 432724
[ 512- 1023]: 510659
[ 1024- 2047]: 7658319
Protocol Breakdown
![[protocol breakdown chart]](200803181615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17518397 (100.00%) 12466649015 (100.00%) 711.63
ip 17484040 ( 99.80%) 12456076806 ( 99.92%) 712.43
tcp 15022688 ( 85.75%) 12030950451 ( 96.51%) 800.85
http(s) 6338125 ( 36.18%) 8350524011 ( 66.98%) 1317.51
http(c) 3339166 ( 19.06%) 714710183 ( 5.73%) 214.04
squid 604053 ( 3.45%) 400979788 ( 3.22%) 663.82
smtp 578343 ( 3.30%) 126030754 ( 1.01%) 217.92
ftp 88364 ( 0.50%) 43021766 ( 0.35%) 486.87
pop3 12572 ( 0.07%) 6852892 ( 0.05%) 545.09
imap 6413 ( 0.04%) 2864167 ( 0.02%) 446.62
telnet 1143 ( 0.01%) 109025 ( 0.00%) 95.38
ssh 1197785 ( 6.84%) 444433345 ( 3.56%) 371.05
dns 8464 ( 0.05%) 10325844 ( 0.08%) 1219.97
bgp 221 ( 0.00%) 83299 ( 0.00%) 376.92
napster 39 ( 0.00%) 4476 ( 0.00%) 114.77
realaud 48 ( 0.00%) 19775 ( 0.00%) 411.98
rtsp 246556 ( 1.41%) 228960778 ( 1.84%) 928.64
icecast 23091 ( 0.13%) 23105105 ( 0.19%) 1000.61
hotline 26 ( 0.00%) 7050 ( 0.00%) 271.15
other 2578277 ( 14.72%) 1678918073 ( 13.47%) 651.18
udp 1776847 ( 10.14%) 329844898 ( 2.65%) 185.63
dns 1045856 ( 5.97%) 154217132 ( 1.24%) 147.46
realaud 10630 ( 0.06%) 7800715 ( 0.06%) 733.84
halflif 18 ( 0.00%) 3931 ( 0.00%) 218.39
starcra 35 ( 0.00%) 6177 ( 0.00%) 176.49
everque 24 ( 0.00%) 5685 ( 0.00%) 236.88
unreal 18 ( 0.00%) 3879 ( 0.00%) 215.50
quake 6157 ( 0.04%) 1074204 ( 0.01%) 174.47
cuseeme 1 ( 0.00%) 76 ( 0.00%) 76.00
other 714066 ( 4.08%) 166728338 ( 1.34%) 233.49
icmp 502215 ( 2.87%) 45117208 ( 0.36%) 89.84
ipip 317 ( 0.00%) 38654 ( 0.00%) 121.94
ip6 1086 ( 0.01%) 148318 ( 0.00%) 136.57
other 180887 ( 1.03%) 49977277 ( 0.40%) 276.29
frag 11815 ( 0.07%) 9356313 ( 0.08%) 791.90
ip6 34357 ( 0.20%) 10572209 ( 0.08%) 307.72
tcp6 5208 ( 0.03%) 1168302 ( 0.01%) 224.33
http(s) 257 ( 0.00%) 374075 ( 0.00%) 1455.54
http(c) 1411 ( 0.01%) 135481 ( 0.00%) 96.02
smtp 885 ( 0.01%) 365374 ( 0.00%) 412.85
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 148 ( 0.00%) 15992 ( 0.00%) 108.05
dns 10 ( 0.00%) 1088 ( 0.00%) 108.80
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2403 ( 0.01%) 266927 ( 0.00%) 111.08
udp6 20658 ( 0.12%) 4279473 ( 0.03%) 207.16
dns 18289 ( 0.10%) 3626226 ( 0.03%) 198.27
other 2369 ( 0.01%) 653247 ( 0.01%) 275.75
icmp6 5053 ( 0.03%) 686724 ( 0.01%) 135.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3408 ( 0.02%) 4433630 ( 0.04%) 1300.95
tcpdump file: 200803181615.dump.gz (440.62 MB)