Traffic Trace Info
DumpFile: -
Id: 200803182045
StartTime: Tue Mar 18 20:45:01 2008
EndTime: Tue Mar 18 21:00:01 2008
TotalTime: 899.82 seconds
TotalCapSize: 756.10MB CapLen: 96 bytes
# of packets: 13678922 (7996.77MB)
AvgRate: 74.56Mbps stddev:15.57M
IP flow (unique src/dst pair) Information
# of flows: 717880 (avg. 19.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.2% 2.7% 2.1% 2.0% 1.9% 1.7% 1.4% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 409529
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.5% 6.8% 6.4% 5.1% 4.6% 4.0% 3.3% 3.3% 2.7%
# of IPv6 addresses: 1677
Top 10 bandwidth usage (bytes/total in %):
54.3% 49.9% 9.1% 7.4% 4.5% 4.5% 3.3% 3.1% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182045.pktlen.png)
detailed numbers
[ 32- 63]: 2602332
[ 64- 127]: 4220864
[ 128- 255]: 1044437
[ 256- 511]: 476708
[ 512- 1023]: 367111
[ 1024- 2047]: 4967470
Protocol Breakdown
![[protocol breakdown chart]](200803182045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13678922 (100.00%) 8385224854 (100.00%) 613.00
ip 13645894 ( 99.76%) 8376307059 ( 99.89%) 613.83
tcp 10794729 ( 78.92%) 7728951985 ( 92.17%) 715.99
http(s) 3462516 ( 25.31%) 4669906041 ( 55.69%) 1348.70
http(c) 2030060 ( 14.84%) 261787163 ( 3.12%) 128.96
squid 495727 ( 3.62%) 327255192 ( 3.90%) 660.15
smtp 633679 ( 4.63%) 92777589 ( 1.11%) 146.41
ftp 81972 ( 0.60%) 44518950 ( 0.53%) 543.10
pop3 20741 ( 0.15%) 18875080 ( 0.23%) 910.04
imap 5096 ( 0.04%) 825169 ( 0.01%) 161.92
telnet 305 ( 0.00%) 19764 ( 0.00%) 64.80
ssh 1510221 ( 11.04%) 592821229 ( 7.07%) 392.54
dns 1969 ( 0.01%) 144995 ( 0.00%) 73.64
bgp 202 ( 0.00%) 58284 ( 0.00%) 288.53
napster 20 ( 0.00%) 1838 ( 0.00%) 91.90
realaud 74 ( 0.00%) 21978 ( 0.00%) 297.00
rtsp 47829 ( 0.35%) 65841879 ( 0.79%) 1376.61
icecast 21225 ( 0.16%) 16375831 ( 0.20%) 771.54
hotline 12 ( 0.00%) 1336 ( 0.00%) 111.33
other 2483071 ( 18.15%) 1637719067 ( 19.53%) 659.55
udp 2164063 ( 15.82%) 582637174 ( 6.95%) 269.23
dns 1124227 ( 8.22%) 163793412 ( 1.95%) 145.69
realaud 12396 ( 0.09%) 7902221 ( 0.09%) 637.48
halflif 19 ( 0.00%) 3109 ( 0.00%) 163.63
starcra 39 ( 0.00%) 7369 ( 0.00%) 188.95
everque 20 ( 0.00%) 2543 ( 0.00%) 127.15
unreal 83 ( 0.00%) 5814 ( 0.00%) 70.05
quake 19 ( 0.00%) 2414 ( 0.00%) 127.05
cuseeme 1 ( 0.00%) 78 ( 0.00%) 78.00
other 1026806 ( 7.51%) 410880899 ( 4.90%) 400.15
icmp 635707 ( 4.65%) 54235692 ( 0.65%) 85.32
ipip 301 ( 0.00%) 35918 ( 0.00%) 119.33
ip6 1061 ( 0.01%) 147622 ( 0.00%) 139.13
other 50033 ( 0.37%) 10298668 ( 0.12%) 205.84
frag 4131 ( 0.03%) 3400542 ( 0.04%) 823.18
ip6 33028 ( 0.24%) 8917795 ( 0.11%) 270.01
tcp6 8539 ( 0.06%) 842045 ( 0.01%) 98.61
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 6031 ( 0.04%) 533816 ( 0.01%) 88.51
smtp 216 ( 0.00%) 48535 ( 0.00%) 224.70
pop3 34 ( 0.00%) 3172 ( 0.00%) 93.29
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 67 ( 0.00%) 7931 ( 0.00%) 118.37
other 2181 ( 0.02%) 247447 ( 0.00%) 113.46
udp6 16226 ( 0.12%) 2959087 ( 0.04%) 182.37
dns 14775 ( 0.11%) 2656910 ( 0.03%) 179.82
everque 2 ( 0.00%) 232 ( 0.00%) 116.00
quake 1 ( 0.00%) 96 ( 0.00%) 96.00
other 1448 ( 0.01%) 301849 ( 0.00%) 208.46
icmp6 4818 ( 0.04%) 662864 ( 0.01%) 137.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3415 ( 0.02%) 4449719 ( 0.05%) 1302.99
tcpdump file: 200803182045.dump.gz (360.28 MB)