Traffic Trace Info
DumpFile: -
Id: 200803181845
StartTime: Tue Mar 18 18:45:00 2008
EndTime: Tue Mar 18 19:00:01 2008
TotalTime: 900.69 seconds
TotalCapSize: 923.49MB CapLen: 96 bytes
# of packets: 16917317 (9879.88MB)
AvgRate: 92.02Mbps stddev:17.31M
IP flow (unique src/dst pair) Information
# of flows: 905431 (avg. 18.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.5% 3.3% 2.9% 1.5% 1.4% 1.4% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 475582
Top 10 bandwidth usage (bytes/total in %):
6.3% 5.6% 5.1% 4.7% 4.6% 4.1% 4.0% 3.5% 3.5% 3.5%
# of IPv6 addresses: 1736
Top 10 bandwidth usage (bytes/total in %):
51.5% 47.2% 9.8% 7.9% 3.9% 3.5% 3.3% 2.6% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181845.pktlen.png)
detailed numbers
[ 32- 63]: 3937224
[ 64- 127]: 4956408
[ 128- 255]: 858616
[ 256- 511]: 485112
[ 512- 1023]: 533105
[ 1024- 2047]: 6146852
Protocol Breakdown
![[protocol breakdown chart]](200803181845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16917317 (100.00%) 10359802238 (100.00%) 612.38
ip 16884962 ( 99.81%) 10350370339 ( 99.91%) 612.99
tcp 13661756 ( 80.76%) 9510781053 ( 91.80%) 696.16
http(s) 4952318 ( 29.27%) 6484778388 ( 62.60%) 1309.44
http(c) 3959368 ( 23.40%) 682698773 ( 6.59%) 172.43
squid 421618 ( 2.49%) 233129557 ( 2.25%) 552.94
smtp 665179 ( 3.93%) 134064356 ( 1.29%) 201.55
ftp 123786 ( 0.73%) 63184483 ( 0.61%) 510.43
pop3 7735 ( 0.05%) 3711695 ( 0.04%) 479.86
imap 4440 ( 0.03%) 1726248 ( 0.02%) 388.79
telnet 272 ( 0.00%) 17792 ( 0.00%) 65.41
ssh 1282203 ( 7.58%) 536912036 ( 5.18%) 418.74
dns 2355 ( 0.01%) 190154 ( 0.00%) 80.74
bgp 206 ( 0.00%) 65611 ( 0.00%) 318.50
napster 37 ( 0.00%) 4026 ( 0.00%) 108.81
realaud 17 ( 0.00%) 2035 ( 0.00%) 119.71
rtsp 178151 ( 1.05%) 219116084 ( 2.12%) 1229.95
icecast 12626 ( 0.07%) 15231961 ( 0.15%) 1206.40
hotline 25 ( 0.00%) 3826 ( 0.00%) 153.04
other 2051410 ( 12.13%) 1135943428 ( 10.96%) 553.74
udp 2312036 ( 13.67%) 746444205 ( 7.21%) 322.85
dns 1006897 ( 5.95%) 147674167 ( 1.43%) 146.66
realaud 12517 ( 0.07%) 7917820 ( 0.08%) 632.57
halflif 14 ( 0.00%) 2666 ( 0.00%) 190.43
starcra 32 ( 0.00%) 6922 ( 0.00%) 216.31
everque 29 ( 0.00%) 6358 ( 0.00%) 219.24
unreal 145 ( 0.00%) 12392 ( 0.00%) 85.46
quake 15 ( 0.00%) 2991 ( 0.00%) 199.40
cuseeme 4 ( 0.00%) 1645 ( 0.00%) 411.25
other 1292365 ( 7.64%) 590813971 ( 5.70%) 457.16
icmp 795277 ( 4.70%) 67732305 ( 0.65%) 85.17
ipip 307 ( 0.00%) 38644 ( 0.00%) 125.88
ip6 1020 ( 0.01%) 137472 ( 0.00%) 134.78
other 114566 ( 0.68%) 25236660 ( 0.24%) 220.28
frag 1344 ( 0.01%) 1105683 ( 0.01%) 822.68
ip6 32355 ( 0.19%) 9431899 ( 0.09%) 291.51
tcp6 4260 ( 0.03%) 661460 ( 0.01%) 155.27
http(s) 22 ( 0.00%) 4033 ( 0.00%) 183.32
http(c) 1455 ( 0.01%) 142719 ( 0.00%) 98.09
smtp 515 ( 0.00%) 234360 ( 0.00%) 455.07
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 21 ( 0.00%) 2183 ( 0.00%) 103.95
bgp 82 ( 0.00%) 10869 ( 0.00%) 132.55
other 2131 ( 0.01%) 264180 ( 0.00%) 123.97
udp6 19553 ( 0.12%) 3618107 ( 0.03%) 185.04
dns 18114 ( 0.11%) 3303960 ( 0.03%) 182.40
other 1439 ( 0.01%) 314147 ( 0.00%) 218.31
icmp6 5164 ( 0.03%) 752908 ( 0.01%) 145.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3348 ( 0.02%) 4395344 ( 0.04%) 1312.83
tcpdump file: 200803181845.dump.gz (423.32 MB)