Traffic Trace Info
DumpFile: -
Id: 200803182015
StartTime: Tue Mar 18 20:15:01 2008
EndTime: Tue Mar 18 20:30:01 2008
TotalTime: 900.03 seconds
TotalCapSize: 796.34MB CapLen: 96 bytes
# of packets: 14316066 (8599.85MB)
AvgRate: 80.13Mbps stddev:17.15M
IP flow (unique src/dst pair) Information
# of flows: 703084 (avg. 20.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 4.5% 3.8% 2.0% 1.9% 1.3% 1.2% 1.2% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 386306
Top 10 bandwidth usage (bytes/total in %):
9.6% 9.2% 8.5% 8.5% 7.1% 5.9% 4.6% 3.8% 2.9% 2.5%
# of IPv6 addresses: 1936
Top 10 bandwidth usage (bytes/total in %):
32.0% 29.3% 20.4% 20.4% 18.2% 18.2% 5.9% 4.9% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182015.pktlen.png)
detailed numbers
[ 32- 63]: 2627706
[ 64- 127]: 4482307
[ 128- 255]: 983686
[ 256- 511]: 403685
[ 512- 1023]: 500481
[ 1024- 2047]: 5318201
Protocol Breakdown
![[protocol breakdown chart]](200803182015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14316066 (100.00%) 9017593033 (100.00%) 629.89
ip 14249570 ( 99.54%) 9002314775 ( 99.83%) 631.76
tcp 11579674 ( 80.89%) 8479026754 ( 94.03%) 732.23
http(s) 4198469 ( 29.33%) 5656720843 ( 62.73%) 1347.33
http(c) 2355493 ( 16.45%) 240070573 ( 2.66%) 101.92
squid 561733 ( 3.92%) 429892317 ( 4.77%) 765.30
smtp 736253 ( 5.14%) 144911301 ( 1.61%) 196.82
ftp 87158 ( 0.61%) 47839869 ( 0.53%) 548.89
pop3 5988 ( 0.04%) 3129309 ( 0.03%) 522.60
imap 5422 ( 0.04%) 995319 ( 0.01%) 183.57
telnet 810 ( 0.01%) 52136 ( 0.00%) 64.37
ssh 1477276 ( 10.32%) 565222046 ( 6.27%) 382.61
dns 8633 ( 0.06%) 10541193 ( 0.12%) 1221.03
bgp 239 ( 0.00%) 78571 ( 0.00%) 328.75
napster 25 ( 0.00%) 2718 ( 0.00%) 108.72
realaud 48 ( 0.00%) 6291 ( 0.00%) 131.06
rtsp 132695 ( 0.93%) 152764087 ( 1.69%) 1151.24
icecast 18285 ( 0.13%) 17077948 ( 0.19%) 933.99
hotline 94 ( 0.00%) 10650 ( 0.00%) 113.30
other 1991051 ( 13.91%) 1209711463 ( 13.42%) 607.57
udp 1919935 ( 13.41%) 449604704 ( 4.99%) 234.18
dns 1037696 ( 7.25%) 150756512 ( 1.67%) 145.28
realaud 11481 ( 0.08%) 7858405 ( 0.09%) 684.47
halflif 17 ( 0.00%) 3397 ( 0.00%) 199.82
starcra 38 ( 0.00%) 7551 ( 0.00%) 198.71
everque 36 ( 0.00%) 4805 ( 0.00%) 133.47
unreal 319 ( 0.00%) 22282 ( 0.00%) 69.85
quake 13756 ( 0.10%) 2485290 ( 0.03%) 180.67
cuseeme 3 ( 0.00%) 229 ( 0.00%) 76.33
other 855682 ( 5.98%) 288405739 ( 3.20%) 337.05
icmp 640879 ( 4.48%) 54404458 ( 0.60%) 84.89
ipip 315 ( 0.00%) 36620 ( 0.00%) 116.25
ip6 1036 ( 0.01%) 142311 ( 0.00%) 137.37
other 107731 ( 0.75%) 19099928 ( 0.21%) 177.29
frag 14420 ( 0.10%) 11438162 ( 0.13%) 793.22
ip6 66496 ( 0.46%) 15278258 ( 0.17%) 229.76
tcp6 38922 ( 0.27%) 6511187 ( 0.07%) 167.29
http(s) 2316 ( 0.02%) 3175456 ( 0.04%) 1371.09
http(c) 33757 ( 0.24%) 2920900 ( 0.03%) 86.53
smtp 458 ( 0.00%) 142919 ( 0.00%) 312.05
pop3 34 ( 0.00%) 3172 ( 0.00%) 93.29
dns 9 ( 0.00%) 1002 ( 0.00%) 111.33
bgp 69 ( 0.00%) 7361 ( 0.00%) 106.68
other 2279 ( 0.02%) 260377 ( 0.00%) 114.25
udp6 19187 ( 0.13%) 3610664 ( 0.04%) 188.18
dns 17274 ( 0.12%) 3032803 ( 0.03%) 175.57
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1912 ( 0.01%) 577724 ( 0.01%) 302.16
icmp6 4923 ( 0.03%) 675642 ( 0.01%) 137.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3434 ( 0.02%) 4476685 ( 0.05%) 1303.64
tcpdump file: 200803182015.dump.gz (373.05 MB)