Traffic Trace Info
DumpFile: -
Id: 200803181830
StartTime: Tue Mar 18 18:30:00 2008
EndTime: Tue Mar 18 18:45:00 2008
TotalTime: 899.76 seconds
TotalCapSize: 981.90MB CapLen: 96 bytes
# of packets: 17879809 (10777.51MB)
AvgRate: 100.49Mbps stddev:18.69M
IP flow (unique src/dst pair) Information
# of flows: 749848 (avg. 23.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 3.6% 2.5% 2.5% 1.5% 1.0% 1.0% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 419188
Top 10 bandwidth usage (bytes/total in %):
9.1% 9.1% 5.9% 5.4% 5.1% 4.5% 4.4% 3.7% 3.1% 2.9%
# of IPv6 addresses: 2201
Top 10 bandwidth usage (bytes/total in %):
46.6% 42.4% 9.6% 7.8% 5.5% 4.0% 3.2% 3.1% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181830.pktlen.png)
detailed numbers
[ 32- 63]: 4028510
[ 64- 127]: 5314117
[ 128- 255]: 853273
[ 256- 511]: 453522
[ 512- 1023]: 440125
[ 1024- 2047]: 6790262
Protocol Breakdown
![[protocol breakdown chart]](200803181830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17879809 (100.00%) 11301038212 (100.00%) 632.06
ip 17846022 ( 99.81%) 11291056298 ( 99.91%) 632.69
tcp 14796876 ( 82.76%) 10541655740 ( 93.28%) 712.42
http(s) 5212568 ( 29.15%) 6981156301 ( 61.77%) 1339.29
http(c) 3808517 ( 21.30%) 650630290 ( 5.76%) 170.84
squid 576306 ( 3.22%) 383198168 ( 3.39%) 664.92
smtp 618131 ( 3.46%) 112157925 ( 0.99%) 181.45
ftp 434218 ( 2.43%) 70758280 ( 0.63%) 162.96
pop3 8692 ( 0.05%) 4105832 ( 0.04%) 472.37
imap 6445 ( 0.04%) 3519809 ( 0.03%) 546.13
telnet 22 ( 0.00%) 1732 ( 0.00%) 78.73
ssh 1290068 ( 7.22%) 535002207 ( 4.73%) 414.71
dns 4054 ( 0.02%) 1898151 ( 0.02%) 468.22
bgp 213 ( 0.00%) 68692 ( 0.00%) 322.50
napster 24 ( 0.00%) 6980 ( 0.00%) 290.83
realaud 1009 ( 0.01%) 371848 ( 0.00%) 368.53
rtsp 56462 ( 0.32%) 73148580 ( 0.65%) 1295.54
icecast 17168 ( 0.10%) 18660796 ( 0.17%) 1086.95
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 2762972 ( 15.45%) 1706968709 ( 15.10%) 617.80
udp 2259385 ( 12.64%) 671829261 ( 5.94%) 297.35
dns 979244 ( 5.48%) 144030761 ( 1.27%) 147.08
realaud 11292 ( 0.06%) 7846525 ( 0.07%) 694.87
halflif 6 ( 0.00%) 590 ( 0.00%) 98.33
starcra 30 ( 0.00%) 8413 ( 0.00%) 280.43
everque 24 ( 0.00%) 4972 ( 0.00%) 207.17
unreal 108 ( 0.00%) 9121 ( 0.00%) 84.45
quake 6 ( 0.00%) 450 ( 0.00%) 75.00
cuseeme 2 ( 0.00%) 199 ( 0.00%) 99.50
other 1268624 ( 7.10%) 519921314 ( 4.60%) 409.83
icmp 705347 ( 3.94%) 60697175 ( 0.54%) 86.05
ipip 367 ( 0.00%) 44878 ( 0.00%) 122.28
ip6 1089 ( 0.01%) 151041 ( 0.00%) 138.70
other 82958 ( 0.46%) 16678203 ( 0.15%) 201.04
frag 15149 ( 0.08%) 15509824 ( 0.14%) 1023.82
ip6 33787 ( 0.19%) 9981914 ( 0.09%) 295.44
tcp6 5485 ( 0.03%) 1125742 ( 0.01%) 205.24
http(s) 131 ( 0.00%) 151223 ( 0.00%) 1154.37
http(c) 1909 ( 0.01%) 219914 ( 0.00%) 115.20
smtp 1180 ( 0.01%) 498162 ( 0.00%) 422.17
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 9 ( 0.00%) 1001 ( 0.00%) 111.22
bgp 66 ( 0.00%) 7028 ( 0.00%) 106.48
other 2157 ( 0.01%) 245372 ( 0.00%) 113.76
udp6 19662 ( 0.11%) 3879428 ( 0.03%) 197.31
dns 17240 ( 0.10%) 3049382 ( 0.03%) 176.88
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 3 ( 0.00%) 747 ( 0.00%) 249.00
other 2418 ( 0.01%) 829162 ( 0.01%) 342.91
icmp6 5369 ( 0.03%) 739143 ( 0.01%) 137.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3241 ( 0.02%) 4233521 ( 0.04%) 1306.24
tcpdump file: 200803181830.dump.gz (444.48 MB)