Traffic Trace Info
DumpFile: -
Id: 200803181900
StartTime: Tue Mar 18 19:00:01 2008
EndTime: Tue Mar 18 19:15:01 2008
TotalTime: 899.81 seconds
TotalCapSize: 913.53MB CapLen: 96 bytes
# of packets: 16710738 (10505.69MB)
AvgRate: 97.96Mbps stddev:18.84M
IP flow (unique src/dst pair) Information
# of flows: 724724 (avg. 23.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 4.1% 3.7% 1.6% 1.3% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 398596
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.7% 6.5% 5.8% 5.6% 4.6% 4.4% 4.2% 3.8% 3.8%
# of IPv6 addresses: 1692
Top 10 bandwidth usage (bytes/total in %):
43.8% 38.5% 8.0% 7.1% 6.9% 6.6% 4.3% 3.1% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181900.pktlen.png)
detailed numbers
[ 32- 63]: 3498481
[ 64- 127]: 4735773
[ 128- 255]: 919732
[ 256- 511]: 410958
[ 512- 1023]: 503281
[ 1024- 2047]: 6642513
Protocol Breakdown
![[protocol breakdown chart]](200803181900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16710738 (100.00%) 11016017107 (100.00%) 659.22
ip 16680328 ( 99.82%) 11007892288 ( 99.93%) 659.93
tcp 13613324 ( 81.46%) 10243189476 ( 92.98%) 752.44
http(s) 5482509 ( 32.81%) 7437094834 ( 67.51%) 1356.51
http(c) 3257696 ( 19.49%) 326707798 ( 2.97%) 100.29
squid 486653 ( 2.91%) 346307671 ( 3.14%) 711.61
smtp 619148 ( 3.71%) 106997688 ( 0.97%) 172.81
ftp 180278 ( 1.08%) 46487635 ( 0.42%) 257.87
pop3 13516 ( 0.08%) 9125218 ( 0.08%) 675.14
imap 10319 ( 0.06%) 4117768 ( 0.04%) 399.05
telnet 641 ( 0.00%) 41398 ( 0.00%) 64.58
ssh 1292891 ( 7.74%) 534555354 ( 4.85%) 413.46
dns 2106 ( 0.01%) 164100 ( 0.00%) 77.92
bgp 244 ( 0.00%) 87958 ( 0.00%) 360.48
napster 53 ( 0.00%) 16265 ( 0.00%) 306.89
realaud 125 ( 0.00%) 13606 ( 0.00%) 108.85
rtsp 55472 ( 0.33%) 71600661 ( 0.65%) 1290.75
icecast 12628 ( 0.08%) 15216230 ( 0.14%) 1204.96
hotline 11 ( 0.00%) 1686 ( 0.00%) 153.27
other 2199031 ( 13.16%) 1344653426 ( 12.21%) 611.48
udp 2204873 ( 13.19%) 679295541 ( 6.17%) 308.09
dns 960698 ( 5.75%) 147535719 ( 1.34%) 153.57
realaud 12530 ( 0.07%) 7919260 ( 0.07%) 632.02
halflif 8 ( 0.00%) 1071 ( 0.00%) 133.88
starcra 28 ( 0.00%) 5767 ( 0.00%) 205.96
everque 27 ( 0.00%) 6189 ( 0.00%) 229.22
unreal 28 ( 0.00%) 4133 ( 0.00%) 147.61
quake 12 ( 0.00%) 897 ( 0.00%) 74.75
cuseeme 1 ( 0.00%) 76 ( 0.00%) 76.00
other 1231511 ( 7.37%) 523811841 ( 4.76%) 425.34
icmp 733279 ( 4.39%) 61459694 ( 0.56%) 83.81
ipip 373 ( 0.00%) 45846 ( 0.00%) 122.91
ip6 1055 ( 0.01%) 145056 ( 0.00%) 137.49
other 127424 ( 0.76%) 23756675 ( 0.22%) 186.44
frag 5283 ( 0.03%) 4214843 ( 0.04%) 797.81
ip6 30408 ( 0.18%) 8124699 ( 0.07%) 267.19
tcp6 5355 ( 0.03%) 1108147 ( 0.01%) 206.94
http(s) 9 ( 0.00%) 2709 ( 0.00%) 301.00
http(c) 1839 ( 0.01%) 177707 ( 0.00%) 96.63
smtp 1317 ( 0.01%) 676029 ( 0.01%) 513.31
pop3 33 ( 0.00%) 2950 ( 0.00%) 89.39
dns 5 ( 0.00%) 542 ( 0.00%) 108.40
bgp 69 ( 0.00%) 7503 ( 0.00%) 108.74
other 2083 ( 0.01%) 240707 ( 0.00%) 115.56
udp6 17232 ( 0.10%) 3146857 ( 0.03%) 182.62
dns 15857 ( 0.09%) 2848395 ( 0.03%) 179.63
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1374 ( 0.01%) 298325 ( 0.00%) 217.12
icmp6 5441 ( 0.03%) 785952 ( 0.01%) 144.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2349 ( 0.01%) 3079527 ( 0.03%) 1310.99
tcpdump file: 200803181900.dump.gz (417.71 MB)