Traffic Trace Info
DumpFile: -
Id: 200803181800
StartTime: Tue Mar 18 18:00:01 2008
EndTime: Tue Mar 18 18:15:00 2008
TotalTime: 899.42 seconds
TotalCapSize: 1038.93MB CapLen: 96 bytes
# of packets: 18517186 (12042.15MB)
AvgRate: 112.33Mbps stddev:25.82M
IP flow (unique src/dst pair) Information
# of flows: 751087 (avg. 24.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.6% 3.2% 2.0% 1.8% 1.5% 1.4% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 440996
Top 10 bandwidth usage (bytes/total in %):
9.5% 5.0% 4.9% 4.7% 4.4% 4.2% 4.2% 3.9% 3.6% 3.3%
# of IPv6 addresses: 1930
Top 10 bandwidth usage (bytes/total in %):
50.0% 45.9% 7.1% 6.0% 4.0% 2.8% 2.6% 2.5% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181800.pktlen.png)
detailed numbers
[ 32- 63]: 3509744
[ 64- 127]: 5386083
[ 128- 255]: 917784
[ 256- 511]: 648828
[ 512- 1023]: 484460
[ 1024- 2047]: 7570287
Protocol Breakdown
![[protocol breakdown chart]](200803181800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18517186 (100.00%) 12627107992 (100.00%) 681.91
ip 18482631 ( 99.81%) 12617473858 ( 99.92%) 682.67
tcp 15470850 ( 83.55%) 12112046823 ( 95.92%) 782.89
http(s) 5719349 ( 30.89%) 7608511897 ( 60.26%) 1330.31
http(c) 3492899 ( 18.86%) 589329409 ( 4.67%) 168.72
squid 622952 ( 3.36%) 436054174 ( 3.45%) 699.98
smtp 628704 ( 3.40%) 126343249 ( 1.00%) 200.96
ftp 80122 ( 0.43%) 37891404 ( 0.30%) 472.92
pop3 8661 ( 0.05%) 4042188 ( 0.03%) 466.71
imap 6581 ( 0.04%) 3932237 ( 0.03%) 597.51
telnet 83 ( 0.00%) 9635 ( 0.00%) 116.08
ssh 1280362 ( 6.91%) 529509993 ( 4.19%) 413.56
dns 2299 ( 0.01%) 209938 ( 0.00%) 91.32
bgp 249 ( 0.00%) 102467 ( 0.00%) 411.51
napster 4 ( 0.00%) 242 ( 0.00%) 60.50
realaud 23 ( 0.00%) 3641 ( 0.00%) 158.30
rtsp 55850 ( 0.30%) 72329990 ( 0.57%) 1295.08
icecast 23087 ( 0.12%) 23107911 ( 0.18%) 1000.91
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 3549619 ( 19.17%) 2680667068 ( 21.23%) 755.20
udp 1923073 ( 10.39%) 401722654 ( 3.18%) 208.90
dns 1076023 ( 5.81%) 157576146 ( 1.25%) 146.44
realaud 10622 ( 0.06%) 7798760 ( 0.06%) 734.21
halflif 17 ( 0.00%) 2277 ( 0.00%) 133.94
starcra 26 ( 0.00%) 4841 ( 0.00%) 186.19
everque 23 ( 0.00%) 3681 ( 0.00%) 160.04
unreal 19 ( 0.00%) 4485 ( 0.00%) 236.05
quake 23 ( 0.00%) 2672 ( 0.00%) 116.17
cuseeme 40 ( 0.00%) 3515 ( 0.00%) 87.88
other 836262 ( 4.52%) 236320896 ( 1.87%) 282.59
icmp 970108 ( 5.24%) 78720428 ( 0.62%) 81.15
ipip 358 ( 0.00%) 43734 ( 0.00%) 122.16
ip6 1089 ( 0.01%) 152438 ( 0.00%) 139.98
other 117153 ( 0.63%) 24787781 ( 0.20%) 211.58
frag 1479 ( 0.01%) 1195263 ( 0.01%) 808.16
ip6 34555 ( 0.19%) 9634134 ( 0.08%) 278.81
tcp6 7291 ( 0.04%) 1169350 ( 0.01%) 160.38
http(s) 165 ( 0.00%) 93281 ( 0.00%) 565.34
http(c) 3889 ( 0.02%) 444062 ( 0.00%) 114.18
smtp 1006 ( 0.01%) 377447 ( 0.00%) 375.20
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2133 ( 0.01%) 244738 ( 0.00%) 114.74
udp6 18368 ( 0.10%) 3289516 ( 0.03%) 179.09
dns 16733 ( 0.09%) 2940181 ( 0.02%) 175.71
everque 4 ( 0.00%) 536 ( 0.00%) 134.00
other 1631 ( 0.01%) 348799 ( 0.00%) 213.86
icmp6 5467 ( 0.03%) 752538 ( 0.01%) 137.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3399 ( 0.02%) 4418650 ( 0.03%) 1299.99
tcpdump file: 200803181800.dump.gz (463.31 MB)