Traffic Trace Info
DumpFile: -
Id: 200803181700
StartTime: Tue Mar 18 17:00:01 2008
EndTime: Tue Mar 18 17:15:01 2008
TotalTime: 900.24 seconds
TotalCapSize: 958.93MB CapLen: 96 bytes
# of packets: 17248294 (11294.41MB)
AvgRate: 105.23Mbps stddev:19.50M
IP flow (unique src/dst pair) Information
# of flows: 678312 (avg. 25.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 4.0% 3.4% 2.6% 2.3% 1.6% 1.6% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 355562
Top 10 bandwidth usage (bytes/total in %):
8.6% 8.6% 5.3% 5.2% 4.8% 4.5% 4.1% 4.0% 3.9% 3.5%
# of IPv6 addresses: 2346
Top 10 bandwidth usage (bytes/total in %):
51.6% 47.3% 6.4% 5.6% 5.4% 4.8% 2.4% 2.3% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181700.pktlen.png)
detailed numbers
[ 32- 63]: 3301786
[ 64- 127]: 4982576
[ 128- 255]: 938122
[ 256- 511]: 444152
[ 512- 1023]: 453429
[ 1024- 2047]: 7128229
Protocol Breakdown
![[protocol breakdown chart]](200803181700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17248294 (100.00%) 11843048087 (100.00%) 686.62
ip 17214852 ( 99.81%) 11833363019 ( 99.92%) 687.39
tcp 14807579 ( 85.85%) 11457271538 ( 96.74%) 773.74
http(s) 5976333 ( 34.65%) 7964784332 ( 67.25%) 1332.72
http(c) 3634528 ( 21.07%) 693040214 ( 5.85%) 190.68
squid 619287 ( 3.59%) 468676892 ( 3.96%) 756.80
smtp 631963 ( 3.66%) 153250615 ( 1.29%) 242.50
ftp 98301 ( 0.57%) 52780416 ( 0.45%) 536.93
pop3 16601 ( 0.10%) 5736941 ( 0.05%) 345.58
imap 5227 ( 0.03%) 1648707 ( 0.01%) 315.42
telnet 817 ( 0.00%) 65184 ( 0.00%) 79.78
ssh 1297169 ( 7.52%) 538733016 ( 4.55%) 415.31
dns 2372 ( 0.01%) 190863 ( 0.00%) 80.47
bgp 242 ( 0.00%) 85414 ( 0.00%) 352.95
napster 27 ( 0.00%) 3264 ( 0.00%) 120.89
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 224740 ( 1.30%) 295420480 ( 2.49%) 1314.50
icecast 23155 ( 0.13%) 23126205 ( 0.20%) 998.76
other 2276800 ( 13.20%) 1259727975 ( 10.64%) 553.29
udp 1898760 ( 11.01%) 318249367 ( 2.69%) 167.61
dns 1039318 ( 6.03%) 155363186 ( 1.31%) 149.49
rip 1 ( 0.00%) 319 ( 0.00%) 319.00
realaud 10643 ( 0.06%) 7808166 ( 0.07%) 733.64
halflif 4 ( 0.00%) 436 ( 0.00%) 109.00
starcra 35 ( 0.00%) 6111 ( 0.00%) 174.60
everque 20 ( 0.00%) 2954 ( 0.00%) 147.70
unreal 13 ( 0.00%) 3065 ( 0.00%) 235.77
quake 18 ( 0.00%) 3916 ( 0.00%) 217.56
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 848684 ( 4.92%) 155055422 ( 1.31%) 182.70
icmp 403305 ( 2.34%) 37898568 ( 0.32%) 93.97
ipip 344 ( 0.00%) 42326 ( 0.00%) 123.04
ip6 987 ( 0.01%) 134037 ( 0.00%) 135.80
other 103877 ( 0.60%) 19767183 ( 0.17%) 190.29
frag 1658 ( 0.01%) 1347132 ( 0.01%) 812.50
ip6 33442 ( 0.19%) 9685068 ( 0.08%) 289.61
tcp6 5114 ( 0.03%) 712866 ( 0.01%) 139.39
http(c) 2001 ( 0.01%) 191579 ( 0.00%) 95.74
smtp 597 ( 0.00%) 224465 ( 0.00%) 375.99
ftp 18 ( 0.00%) 1750 ( 0.00%) 97.22
pop3 36 ( 0.00%) 3306 ( 0.00%) 91.83
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 2399 ( 0.01%) 285217 ( 0.00%) 118.89
udp6 19297 ( 0.11%) 3645910 ( 0.03%) 188.94
dns 16777 ( 0.10%) 2890310 ( 0.02%) 172.28
everque 3 ( 0.00%) 1277 ( 0.00%) 425.67
other 2517 ( 0.01%) 754323 ( 0.01%) 299.69
icmp6 5505 ( 0.03%) 751508 ( 0.01%) 136.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3496 ( 0.02%) 4570704 ( 0.04%) 1307.41
tcpdump file: 200803181700.dump.gz (437.82 MB)