Traffic Trace Info
DumpFile: -
Id: 200803182000
StartTime: Tue Mar 18 20:00:00 2008
EndTime: Tue Mar 18 20:15:01 2008
TotalTime: 900.71 seconds
TotalCapSize: 813.88MB CapLen: 96 bytes
# of packets: 14664734 (8701.97MB)
AvgRate: 81.04Mbps stddev:10.67M
IP flow (unique src/dst pair) Information
# of flows: 814302 (avg. 18.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.7% 2.8% 2.7% 2.4% 1.4% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 447752
Top 10 bandwidth usage (bytes/total in %):
8.6% 8.5% 7.4% 6.4% 5.7% 5.1% 4.6% 3.7% 3.7% 2.8%
# of IPv6 addresses: 1867
Top 10 bandwidth usage (bytes/total in %):
39.0% 35.4% 22.6% 22.6% 4.7% 4.1% 3.6% 3.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182000.pktlen.png)
detailed numbers
[ 32- 63]: 2923024
[ 64- 127]: 4529881
[ 128- 255]: 939303
[ 256- 511]: 414352
[ 512- 1023]: 456426
[ 1024- 2047]: 5401748
Protocol Breakdown
![[protocol breakdown chart]](200803182000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14664734 (100.00%) 9124680070 (100.00%) 622.22
ip 14605314 ( 99.59%) 9113461502 ( 99.88%) 623.98
tcp 11835851 ( 80.71%) 8558750355 ( 93.80%) 723.12
http(s) 4218249 ( 28.76%) 5677654675 ( 62.22%) 1345.97
http(c) 2641237 ( 18.01%) 340689600 ( 3.73%) 128.99
squid 386284 ( 2.63%) 218418167 ( 2.39%) 565.43
smtp 663972 ( 4.53%) 104173416 ( 1.14%) 156.89
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 88458 ( 0.60%) 43922761 ( 0.48%) 496.54
pop3 7295 ( 0.05%) 5068447 ( 0.06%) 694.78
imap 4577 ( 0.03%) 916420 ( 0.01%) 200.22
telnet 465 ( 0.00%) 30261 ( 0.00%) 65.08
ssh 1217380 ( 8.30%) 522756507 ( 5.73%) 429.41
dns 2318 ( 0.02%) 225520 ( 0.00%) 97.29
bgp 248 ( 0.00%) 100282 ( 0.00%) 404.36
napster 18 ( 0.00%) 1998 ( 0.00%) 111.00
realaud 19 ( 0.00%) 1549 ( 0.00%) 81.53
rtsp 33576 ( 0.23%) 49286495 ( 0.54%) 1467.91
icecast 18473 ( 0.13%) 17261363 ( 0.19%) 934.41
other 2553278 ( 17.41%) 1578242654 ( 17.30%) 618.12
udp 1956208 ( 13.34%) 474077745 ( 5.20%) 242.35
dns 1121148 ( 7.65%) 162967880 ( 1.79%) 145.36
realaud 11295 ( 0.08%) 7848282 ( 0.09%) 694.85
halflif 10 ( 0.00%) 2633 ( 0.00%) 263.30
starcra 26 ( 0.00%) 4983 ( 0.00%) 191.65
everque 34 ( 0.00%) 7077 ( 0.00%) 208.15
unreal 221 ( 0.00%) 16408 ( 0.00%) 74.24
quake 38876 ( 0.27%) 10032746 ( 0.11%) 258.07
cuseeme 3 ( 0.00%) 558 ( 0.00%) 186.00
other 783977 ( 5.35%) 293154580 ( 3.21%) 373.93
icmp 648845 ( 4.42%) 55286030 ( 0.61%) 85.21
ipip 363 ( 0.00%) 46766 ( 0.00%) 128.83
ip6 1150 ( 0.01%) 161734 ( 0.00%) 140.64
other 162897 ( 1.11%) 25138872 ( 0.28%) 154.32
frag 4351 ( 0.03%) 3493530 ( 0.04%) 802.93
ip6 59420 ( 0.41%) 11218568 ( 0.12%) 188.80
tcp6 33886 ( 0.23%) 3289880 ( 0.04%) 97.09
http(s) 239 ( 0.00%) 252070 ( 0.00%) 1054.69
http(c) 30992 ( 0.21%) 2683361 ( 0.03%) 86.58
smtp 302 ( 0.00%) 77593 ( 0.00%) 256.93
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 75 ( 0.00%) 8491 ( 0.00%) 113.21
other 2245 ( 0.02%) 265323 ( 0.00%) 118.18
udp6 16997 ( 0.12%) 3191854 ( 0.03%) 187.79
dns 15217 ( 0.10%) 2684915 ( 0.03%) 176.44
everque 2 ( 0.00%) 692 ( 0.00%) 346.00
other 1778 ( 0.01%) 506247 ( 0.01%) 284.73
icmp6 5512 ( 0.04%) 807810 ( 0.01%) 146.55
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2994 ( 0.02%) 3924808 ( 0.04%) 1310.89
tcpdump file: 200803182000.dump.gz (379.92 MB)