Traffic Trace Info
DumpFile: -
Id: 200803181930
StartTime: Tue Mar 18 19:30:01 2008
EndTime: Tue Mar 18 19:45:01 2008
TotalTime: 900.19 seconds
TotalCapSize: 863.56MB CapLen: 96 bytes
# of packets: 15729843 (8962.44MB)
AvgRate: 83.55Mbps stddev:14.77M
IP flow (unique src/dst pair) Information
# of flows: 835871 (avg. 18.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.3% 2.2% 1.7% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 428930
Top 10 bandwidth usage (bytes/total in %):
7.4% 7.3% 6.9% 6.4% 5.9% 5.4% 4.5% 4.4% 3.9% 2.9%
# of IPv6 addresses: 1893
Top 10 bandwidth usage (bytes/total in %):
53.3% 48.8% 5.5% 4.8% 4.4% 3.2% 2.6% 2.3% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181930.pktlen.png)
detailed numbers
[ 32- 63]: 3454214
[ 64- 127]: 4897631
[ 128- 255]: 892154
[ 256- 511]: 478243
[ 512- 1023]: 429072
[ 1024- 2047]: 5578529
Protocol Breakdown
![[protocol breakdown chart]](200803181930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15729843 (100.00%) 9397797762 (100.00%) 597.45
ip 15700616 ( 99.81%) 9388982731 ( 99.91%) 598.00
tcp 12020240 ( 76.42%) 8655433077 ( 92.10%) 720.07
http(s) 4015769 ( 25.53%) 5381199498 ( 57.26%) 1340.02
http(c) 2370564 ( 15.07%) 258168789 ( 2.75%) 108.91
squid 561032 ( 3.57%) 411243022 ( 4.38%) 733.01
smtp 661499 ( 4.21%) 140755032 ( 1.50%) 212.78
ftp 142653 ( 0.91%) 41783720 ( 0.44%) 292.90
pop3 6791 ( 0.04%) 3365080 ( 0.04%) 495.52
imap 5095 ( 0.03%) 1676423 ( 0.02%) 329.03
telnet 278 ( 0.00%) 18587 ( 0.00%) 66.86
ssh 1260475 ( 8.01%) 537449563 ( 5.72%) 426.39
dns 3870 ( 0.02%) 1884435 ( 0.02%) 486.93
bgp 219 ( 0.00%) 66787 ( 0.00%) 304.96
realaud 7 ( 0.00%) 1176 ( 0.00%) 168.00
rtsp 51212 ( 0.33%) 68471862 ( 0.73%) 1337.03
icecast 12727 ( 0.08%) 15235499 ( 0.16%) 1197.10
hotline 7 ( 0.00%) 1446 ( 0.00%) 206.57
other 2928041 ( 18.61%) 1794112098 ( 19.09%) 612.73
udp 2589164 ( 16.46%) 626213261 ( 6.66%) 241.86
dns 1027141 ( 6.53%) 149017733 ( 1.59%) 145.08
realaud 11552 ( 0.07%) 7857343 ( 0.08%) 680.17
halflif 23 ( 0.00%) 2395 ( 0.00%) 104.13
starcra 36 ( 0.00%) 6163 ( 0.00%) 171.19
everque 33 ( 0.00%) 4163 ( 0.00%) 126.15
unreal 16 ( 0.00%) 3281 ( 0.00%) 205.06
quake 42 ( 0.00%) 5109 ( 0.00%) 121.64
cuseeme 2 ( 0.00%) 173 ( 0.00%) 86.50
other 1550299 ( 9.86%) 469309382 ( 4.99%) 302.72
icmp 887095 ( 5.64%) 76519401 ( 0.81%) 86.26
ipip 385 ( 0.00%) 48274 ( 0.00%) 125.39
ip6 1105 ( 0.01%) 154647 ( 0.00%) 139.95
other 202627 ( 1.29%) 30614071 ( 0.33%) 151.09
frag 2383 ( 0.02%) 2157708 ( 0.02%) 905.46
ip6 29227 ( 0.19%) 8815031 ( 0.09%) 301.61
tcp6 4349 ( 0.03%) 704353 ( 0.01%) 161.96
http(s) 131 ( 0.00%) 151223 ( 0.00%) 1154.37
http(c) 1341 ( 0.01%) 129597 ( 0.00%) 96.64
smtp 571 ( 0.00%) 164209 ( 0.00%) 287.58
pop3 11 ( 0.00%) 1014 ( 0.00%) 92.18
dns 12 ( 0.00%) 1179 ( 0.00%) 98.25
bgp 64 ( 0.00%) 6662 ( 0.00%) 104.09
other 2219 ( 0.01%) 250469 ( 0.00%) 112.87
udp6 16201 ( 0.10%) 3054121 ( 0.03%) 188.51
dns 14476 ( 0.09%) 2564551 ( 0.03%) 177.16
other 1725 ( 0.01%) 489570 ( 0.01%) 283.81
icmp6 5414 ( 0.03%) 814869 ( 0.01%) 150.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3233 ( 0.02%) 4237608 ( 0.05%) 1310.74
tcpdump file: 200803181930.dump.gz (397.13 MB)