Traffic Trace Info
DumpFile: -
Id: 200803182030
StartTime: Tue Mar 18 20:30:01 2008
EndTime: Tue Mar 18 20:45:01 2008
TotalTime: 900.01 seconds
TotalCapSize: 812.02MB CapLen: 96 bytes
# of packets: 14637302 (8585.84MB)
AvgRate: 80.03Mbps stddev:11.97M
IP flow (unique src/dst pair) Information
# of flows: 714850 (avg. 20.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.5% 2.2% 1.9% 1.7% 1.6% 1.4% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 409690
Top 10 bandwidth usage (bytes/total in %):
9.6% 8.8% 6.9% 5.9% 5.8% 5.8% 4.7% 3.8% 2.7% 2.2%
# of IPv6 addresses: 1812
Top 10 bandwidth usage (bytes/total in %):
41.0% 37.6% 21.5% 21.5% 8.8% 7.1% 3.3% 2.9% 2.1% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182030.pktlen.png)
detailed numbers
[ 32- 63]: 2770973
[ 64- 127]: 4573706
[ 128- 255]: 1030116
[ 256- 511]: 508504
[ 512- 1023]: 487376
[ 1024- 2047]: 5266627
Protocol Breakdown
![[protocol breakdown chart]](200803182030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14637302 (100.00%) 9002910140 (100.00%) 615.07
ip 14573782 ( 99.57%) 8990765251 ( 99.87%) 616.91
tcp 11743439 ( 80.23%) 8375519917 ( 93.03%) 713.21
http(s) 3640434 ( 24.87%) 4856469302 ( 53.94%) 1334.04
http(c) 2324055 ( 15.88%) 234144746 ( 2.60%) 100.75
squid 564497 ( 3.86%) 434866737 ( 4.83%) 770.36
smtp 593410 ( 4.05%) 98470201 ( 1.09%) 165.94
ftp 77112 ( 0.53%) 40927918 ( 0.45%) 530.76
pop3 6301 ( 0.04%) 2789112 ( 0.03%) 442.65
imap 5016 ( 0.03%) 883662 ( 0.01%) 176.17
telnet 848 ( 0.01%) 54611 ( 0.00%) 64.40
ssh 2143853 ( 14.65%) 1095375591 ( 12.17%) 510.94
dns 3716 ( 0.03%) 1870859 ( 0.02%) 503.46
bgp 227 ( 0.00%) 72177 ( 0.00%) 317.96
napster 8 ( 0.00%) 1265 ( 0.00%) 158.12
realaud 24 ( 0.00%) 12322 ( 0.00%) 513.42
rtsp 140639 ( 0.96%) 158548749 ( 1.76%) 1127.35
icecast 16007 ( 0.11%) 16513314 ( 0.18%) 1031.63
hotline 10 ( 0.00%) 1119 ( 0.00%) 111.90
other 2227275 ( 15.22%) 1434517812 ( 15.93%) 644.07
udp 2075676 ( 14.18%) 542697959 ( 6.03%) 261.46
dns 1080451 ( 7.38%) 156975831 ( 1.74%) 145.29
realaud 12391 ( 0.08%) 7909042 ( 0.09%) 638.29
halflif 8 ( 0.00%) 621 ( 0.00%) 77.62
starcra 25 ( 0.00%) 4442 ( 0.00%) 177.68
everque 30 ( 0.00%) 6146 ( 0.00%) 204.87
unreal 68 ( 0.00%) 5025 ( 0.00%) 73.90
quake 14 ( 0.00%) 2262 ( 0.00%) 161.57
cuseeme 1 ( 0.00%) 69 ( 0.00%) 69.00
other 981997 ( 6.71%) 377746925 ( 4.20%) 384.67
icmp 658622 ( 4.50%) 55458273 ( 0.62%) 84.20
ipip 372 ( 0.00%) 48436 ( 0.00%) 130.20
ip6 1090 ( 0.01%) 151179 ( 0.00%) 138.70
other 94583 ( 0.65%) 16889487 ( 0.19%) 178.57
frag 9433 ( 0.06%) 8086341 ( 0.09%) 857.24
ip6 63520 ( 0.43%) 12144889 ( 0.13%) 191.20
tcp6 35374 ( 0.24%) 3415100 ( 0.04%) 96.54
http(s) 122 ( 0.00%) 148514 ( 0.00%) 1217.33
http(c) 32068 ( 0.22%) 2787816 ( 0.03%) 86.93
smtp 462 ( 0.00%) 182699 ( 0.00%) 395.45
ftp 48 ( 0.00%) 4913 ( 0.00%) 102.35
pop3 42 ( 0.00%) 3692 ( 0.00%) 87.90
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 60 ( 0.00%) 6210 ( 0.00%) 103.50
other 2565 ( 0.02%) 280621 ( 0.00%) 109.40
udp6 19484 ( 0.13%) 3456626 ( 0.04%) 177.41
dns 17966 ( 0.12%) 3105445 ( 0.03%) 172.85
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1517 ( 0.01%) 351044 ( 0.00%) 231.41
icmp6 5135 ( 0.04%) 701125 ( 0.01%) 136.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3497 ( 0.02%) 4567958 ( 0.05%) 1306.25
tcpdump file: 200803182030.dump.gz (381.72 MB)