Traffic Trace Info
DumpFile: -
Id: 200803181815
StartTime: Tue Mar 18 18:15:00 2008
EndTime: Tue Mar 18 18:30:00 2008
TotalTime: 899.96 seconds
TotalCapSize: 1032.24MB CapLen: 96 bytes
# of packets: 18556386 (11930.04MB)
AvgRate: 111.14Mbps stddev:25.63M
IP flow (unique src/dst pair) Information
# of flows: 632179 (avg. 29.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.9% 4.1% 3.3% 2.4% 1.7% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 338282
Top 10 bandwidth usage (bytes/total in %):
11.3% 6.0% 6.0% 5.9% 5.6% 5.3% 4.7% 4.6% 4.2% 4.2%
# of IPv6 addresses: 2059
Top 10 bandwidth usage (bytes/total in %):
54.7% 50.1% 6.1% 5.4% 4.3% 3.4% 2.4% 2.4% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181815.pktlen.png)
detailed numbers
[ 32- 63]: 4397273
[ 64- 127]: 4876653
[ 128- 255]: 867708
[ 256- 511]: 408114
[ 512- 1023]: 414760
[ 1024- 2047]: 7591878
Protocol Breakdown
![[protocol breakdown chart]](200803181815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18556386 (100.00%) 12509556063 (100.00%) 674.14
ip 18526214 ( 99.84%) 12500440809 ( 99.93%) 674.74
tcp 16282500 ( 87.75%) 12167338117 ( 97.26%) 747.26
http(s) 5297559 ( 28.55%) 7069286521 ( 56.51%) 1334.44
http(c) 4110860 ( 22.15%) 681452481 ( 5.45%) 165.77
squid 747409 ( 4.03%) 577322479 ( 4.62%) 772.43
smtp 649359 ( 3.50%) 108726365 ( 0.87%) 167.44
ftp 108278 ( 0.58%) 69184102 ( 0.55%) 638.95
pop3 12638 ( 0.07%) 5748166 ( 0.05%) 454.83
imap 2968 ( 0.02%) 1103549 ( 0.01%) 371.82
telnet 25 ( 0.00%) 1911 ( 0.00%) 76.44
ssh 1333295 ( 7.19%) 572304643 ( 4.57%) 429.24
dns 8795 ( 0.05%) 10529235 ( 0.08%) 1197.18
bgp 206 ( 0.00%) 68289 ( 0.00%) 331.50
napster 28 ( 0.00%) 2928 ( 0.00%) 104.57
realaud 47 ( 0.00%) 6223 ( 0.00%) 132.40
rtsp 57616 ( 0.31%) 74908691 ( 0.60%) 1300.14
icecast 23058 ( 0.12%) 23118073 ( 0.18%) 1002.61
hotline 18 ( 0.00%) 2700 ( 0.00%) 150.00
other 3930336 ( 21.18%) 2973571461 ( 23.77%) 756.57
udp 1548269 ( 8.34%) 259858308 ( 2.08%) 167.84
dns 940855 ( 5.07%) 140345192 ( 1.12%) 149.17
realaud 10627 ( 0.06%) 7800455 ( 0.06%) 734.02
halflif 14 ( 0.00%) 2574 ( 0.00%) 183.86
starcra 30 ( 0.00%) 6491 ( 0.00%) 216.37
everque 24 ( 0.00%) 3953 ( 0.00%) 164.71
unreal 14 ( 0.00%) 2871 ( 0.00%) 205.07
quake 12 ( 0.00%) 1644 ( 0.00%) 137.00
cuseeme 2 ( 0.00%) 174 ( 0.00%) 87.00
other 596677 ( 3.22%) 111692420 ( 0.89%) 187.19
icmp 583610 ( 3.15%) 50311321 ( 0.40%) 86.21
ipip 327 ( 0.00%) 41796 ( 0.00%) 127.82
ip6 1007 ( 0.01%) 136202 ( 0.00%) 135.26
other 110501 ( 0.60%) 22755065 ( 0.18%) 205.93
frag 1276 ( 0.01%) 1031846 ( 0.01%) 808.66
ip6 30172 ( 0.16%) 9115254 ( 0.07%) 302.11
tcp6 4772 ( 0.03%) 679942 ( 0.01%) 142.49
http(s) 42 ( 0.00%) 55245 ( 0.00%) 1315.36
http(c) 2032 ( 0.01%) 214432 ( 0.00%) 105.53
smtp 453 ( 0.00%) 157791 ( 0.00%) 348.32
ftp 20 ( 0.00%) 2069 ( 0.00%) 103.45
pop3 46 ( 0.00%) 4188 ( 0.00%) 91.04
dns 21 ( 0.00%) 2379 ( 0.00%) 113.29
bgp 82 ( 0.00%) 9475 ( 0.00%) 115.55
other 2076 ( 0.01%) 234363 ( 0.00%) 112.89
udp6 16790 ( 0.09%) 3177393 ( 0.03%) 189.24
dns 15000 ( 0.08%) 2687411 ( 0.02%) 179.16
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1789 ( 0.01%) 489845 ( 0.00%) 273.81
icmp6 5092 ( 0.03%) 691447 ( 0.01%) 135.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3488 ( 0.02%) 4562392 ( 0.04%) 1308.03
tcpdump file: 200803181815.dump.gz (461.79 MB)