Traffic Trace Info
DumpFile: -
Id: 200803181745
StartTime: Tue Mar 18 17:45:01 2008
EndTime: Tue Mar 18 18:00:01 2008
TotalTime: 900.31 seconds
TotalCapSize: 937.82MB CapLen: 96 bytes
# of packets: 16719425 (9788.11MB)
AvgRate: 91.22Mbps stddev:13.27M
IP flow (unique src/dst pair) Information
# of flows: 789493 (avg. 21.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.1% 2.4% 1.9% 1.4% 1.2% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 461975
Top 10 bandwidth usage (bytes/total in %):
7.0% 6.2% 5.6% 5.4% 5.0% 4.1% 3.9% 3.7% 3.5% 3.3%
# of IPv6 addresses: 2091
Top 10 bandwidth usage (bytes/total in %):
52.1% 47.8% 8.7% 7.2% 4.6% 3.1% 2.6% 2.4% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181745.pktlen.png)
detailed numbers
[ 32- 63]: 3329061
[ 64- 127]: 5529757
[ 128- 255]: 938436
[ 256- 511]: 447881
[ 512- 1023]: 378701
[ 1024- 2047]: 6095589
Protocol Breakdown
![[protocol breakdown chart]](200803181745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16719425 (100.00%) 10263575664 (100.00%) 613.87
ip 16686703 ( 99.80%) 10254018420 ( 99.91%) 614.50
tcp 14194536 ( 84.90%) 9887304599 ( 96.33%) 696.56
http(s) 5012810 ( 29.98%) 6622306280 ( 64.52%) 1321.08
http(c) 3167081 ( 18.94%) 600755924 ( 5.85%) 189.69
squid 430120 ( 2.57%) 230361918 ( 2.24%) 535.58
smtp 690186 ( 4.13%) 141546635 ( 1.38%) 205.08
ftp 614481 ( 3.68%) 68410170 ( 0.67%) 111.33
pop3 7880 ( 0.05%) 3135874 ( 0.03%) 397.95
imap 5354 ( 0.03%) 3240001 ( 0.03%) 605.16
telnet 210 ( 0.00%) 16573 ( 0.00%) 78.92
ssh 1307705 ( 7.82%) 539813928 ( 5.26%) 412.79
dns 2022 ( 0.01%) 185946 ( 0.00%) 91.96
bgp 230 ( 0.00%) 87442 ( 0.00%) 380.18
napster 35 ( 0.00%) 4420 ( 0.00%) 126.29
realaud 21 ( 0.00%) 2253 ( 0.00%) 107.29
rtsp 86115 ( 0.52%) 63348872 ( 0.62%) 735.63
icecast 23043 ( 0.14%) 23127938 ( 0.23%) 1003.69
hotline 36 ( 0.00%) 3103 ( 0.00%) 86.19
other 2847202 ( 17.03%) 1590957022 ( 15.50%) 558.78
udp 1702579 ( 10.18%) 285161740 ( 2.78%) 167.49
dns 1084247 ( 6.48%) 160039395 ( 1.56%) 147.60
realaud 10622 ( 0.06%) 7798970 ( 0.08%) 734.23
halflif 16 ( 0.00%) 2796 ( 0.00%) 174.75
starcra 30 ( 0.00%) 6432 ( 0.00%) 214.40
everque 13 ( 0.00%) 2338 ( 0.00%) 179.85
unreal 21 ( 0.00%) 4196 ( 0.00%) 199.81
quake 24 ( 0.00%) 2656 ( 0.00%) 110.67
cuseeme 5 ( 0.00%) 416 ( 0.00%) 83.20
other 607582 ( 3.63%) 117297142 ( 1.14%) 193.06
icmp 674005 ( 4.03%) 58728665 ( 0.57%) 87.13
ipip 325 ( 0.00%) 41824 ( 0.00%) 128.69
ip6 974 ( 0.01%) 131111 ( 0.00%) 134.61
other 114284 ( 0.68%) 22650481 ( 0.22%) 198.19
frag 1411 ( 0.01%) 1152662 ( 0.01%) 816.91
ip6 32722 ( 0.20%) 9557244 ( 0.09%) 292.07
tcp6 4281 ( 0.03%) 701326 ( 0.01%) 163.82
http(s) 223 ( 0.00%) 133871 ( 0.00%) 600.32
http(c) 1686 ( 0.01%) 181901 ( 0.00%) 107.89
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 411 ( 0.00%) 155403 ( 0.00%) 378.11
pop3 35 ( 0.00%) 3258 ( 0.00%) 93.09
dns 11 ( 0.00%) 1092 ( 0.00%) 99.27
bgp 80 ( 0.00%) 9237 ( 0.00%) 115.46
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 1829 ( 0.01%) 216120 ( 0.00%) 118.16
udp6 19725 ( 0.12%) 3570121 ( 0.03%) 180.99
dns 17723 ( 0.11%) 3124938 ( 0.03%) 176.32
everque 2 ( 0.00%) 255 ( 0.00%) 127.50
other 2000 ( 0.01%) 444928 ( 0.00%) 222.46
icmp6 5188 ( 0.03%) 709383 ( 0.01%) 136.74
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3497 ( 0.02%) 4572198 ( 0.04%) 1307.46
tcpdump file: 200803181745.dump.gz (431.57 MB)