Traffic Trace Info
DumpFile: -
Id: 200803181730
StartTime: Tue Mar 18 17:30:01 2008
EndTime: Tue Mar 18 17:45:01 2008
TotalTime: 899.95 seconds
TotalCapSize: 981.74MB CapLen: 96 bytes
# of packets: 17521600 (11352.52MB)
AvgRate: 105.83Mbps stddev:27.94M
IP flow (unique src/dst pair) Information
# of flows: 726360 (avg. 24.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.1% 2.8% 2.6% 2.1% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 376992
Top 10 bandwidth usage (bytes/total in %):
7.1% 6.4% 6.1% 5.1% 4.7% 4.2% 4.1% 3.6% 3.5% 3.4%
# of IPv6 addresses: 2268
Top 10 bandwidth usage (bytes/total in %):
51.9% 47.6% 6.1% 5.3% 4.7% 3.1% 3.1% 2.4% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181730.pktlen.png)
detailed numbers
[ 32- 63]: 3514441
[ 64- 127]: 5030175
[ 128- 255]: 961301
[ 256- 511]: 424849
[ 512- 1023]: 381326
[ 1024- 2047]: 7209508
Protocol Breakdown
![[protocol breakdown chart]](200803181730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17521600 (100.00%) 11903981882 (100.00%) 679.39
ip 17490203 ( 99.82%) 11894443314 ( 99.92%) 680.06
tcp 15032174 ( 85.79%) 11497595844 ( 96.59%) 764.87
http(s) 5917708 ( 33.77%) 7950710019 ( 66.79%) 1343.55
http(c) 3472706 ( 19.82%) 626137730 ( 5.26%) 180.30
squid 414264 ( 2.36%) 208280369 ( 1.75%) 502.77
smtp 635688 ( 3.63%) 113684966 ( 0.96%) 178.84
ftp 113263 ( 0.65%) 35290160 ( 0.30%) 311.58
pop3 11229 ( 0.06%) 5293990 ( 0.04%) 471.46
imap 4955 ( 0.03%) 1869207 ( 0.02%) 377.24
telnet 664 ( 0.00%) 91015 ( 0.00%) 137.07
ssh 1312994 ( 7.49%) 534955556 ( 4.49%) 407.43
dns 4037 ( 0.02%) 1895809 ( 0.02%) 469.61
bgp 204 ( 0.00%) 74245 ( 0.00%) 363.95
napster 2 ( 0.00%) 122 ( 0.00%) 61.00
realaud 26 ( 0.00%) 1750 ( 0.00%) 67.31
rtsp 238359 ( 1.36%) 251511652 ( 2.11%) 1055.18
icecast 23414 ( 0.13%) 23158364 ( 0.19%) 989.08
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2882658 ( 16.45%) 1744640710 ( 14.66%) 605.22
udp 1812837 ( 10.35%) 331324149 ( 2.78%) 182.77
dns 1198381 ( 6.84%) 180997530 ( 1.52%) 151.04
realaud 10632 ( 0.06%) 7802252 ( 0.07%) 733.85
halflif 4 ( 0.00%) 454 ( 0.00%) 113.50
starcra 24 ( 0.00%) 4825 ( 0.00%) 201.04
everque 19 ( 0.00%) 3158 ( 0.00%) 166.21
unreal 10 ( 0.00%) 2452 ( 0.00%) 245.20
quake 21 ( 0.00%) 2179 ( 0.00%) 103.76
cuseeme 3 ( 0.00%) 237 ( 0.00%) 79.00
other 603730 ( 3.45%) 142504930 ( 1.20%) 236.04
icmp 555215 ( 3.17%) 48066553 ( 0.40%) 86.57
ipip 350 ( 0.00%) 42612 ( 0.00%) 121.75
ip6 1113 ( 0.01%) 155509 ( 0.00%) 139.72
other 88514 ( 0.51%) 17258647 ( 0.14%) 194.98
frag 1399 ( 0.01%) 1149244 ( 0.01%) 821.48
ip6 31397 ( 0.18%) 9538568 ( 0.08%) 303.81
tcp6 4166 ( 0.02%) 821666 ( 0.01%) 197.23
http(s) 292 ( 0.00%) 225502 ( 0.00%) 772.27
http(c) 1461 ( 0.01%) 141940 ( 0.00%) 97.15
smtp 542 ( 0.00%) 230514 ( 0.00%) 425.30
pop3 36 ( 0.00%) 3306 ( 0.00%) 91.83
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 63 ( 0.00%) 6721 ( 0.00%) 106.68
other 1768 ( 0.01%) 213226 ( 0.00%) 120.60
udp6 18232 ( 0.10%) 3421871 ( 0.03%) 187.68
dns 15976 ( 0.09%) 2819860 ( 0.02%) 176.51
everque 3 ( 0.00%) 394 ( 0.00%) 131.33
unreal 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2252 ( 0.01%) 601480 ( 0.01%) 267.09
icmp6 5493 ( 0.03%) 751645 ( 0.01%) 136.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3476 ( 0.02%) 4539306 ( 0.04%) 1305.90
tcpdump file: 200803181730.dump.gz (448.26 MB)