Traffic Trace Info
DumpFile: -
Id: 200803182100
StartTime: Tue Mar 18 21:00:01 2008
EndTime: Tue Mar 18 21:15:01 2008
TotalTime: 900.00 seconds
TotalCapSize: 828.58MB CapLen: 96 bytes
# of packets: 14931312 (8876.75MB)
AvgRate: 82.76Mbps stddev:16.93M
IP flow (unique src/dst pair) Information
# of flows: 789676 (avg. 18.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.4% 3.3% 1.8% 1.8% 1.5% 1.4% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 437594
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.9% 6.9% 5.7% 5.1% 4.7% 4.5% 4.2% 3.4% 3.4%
# of IPv6 addresses: 1898
Top 10 bandwidth usage (bytes/total in %):
52.0% 47.6% 8.4% 6.9% 3.6% 3.6% 2.9% 2.3% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182100.pktlen.png)
detailed numbers
[ 32- 63]: 2892055
[ 64- 127]: 4523900
[ 128- 255]: 1074180
[ 256- 511]: 537994
[ 512- 1023]: 328269
[ 1024- 2047]: 5574914
Protocol Breakdown
![[protocol breakdown chart]](200803182100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14931312 (100.00%) 9307941967 (100.00%) 623.38
ip 14899758 ( 99.79%) 9298406304 ( 99.90%) 624.06
tcp 11781263 ( 78.90%) 8592618076 ( 92.31%) 729.35
http(s) 3931379 ( 26.33%) 5425746739 ( 58.29%) 1380.11
http(c) 2250731 ( 15.07%) 215262151 ( 2.31%) 95.64
squid 523746 ( 3.51%) 379368221 ( 4.08%) 724.34
smtp 586370 ( 3.93%) 101603908 ( 1.09%) 173.28
ftp 80185 ( 0.54%) 43372225 ( 0.47%) 540.90
pop3 8616 ( 0.06%) 3737889 ( 0.04%) 433.83
imap 5838 ( 0.04%) 1367634 ( 0.01%) 234.26
telnet 191 ( 0.00%) 12502 ( 0.00%) 65.46
ssh 1606695 ( 10.76%) 616893209 ( 6.63%) 383.95
dns 2149 ( 0.01%) 162368 ( 0.00%) 75.56
bgp 179 ( 0.00%) 46922 ( 0.00%) 262.13
napster 24 ( 0.00%) 4127 ( 0.00%) 171.96
realaud 3 ( 0.00%) 222 ( 0.00%) 74.00
rtsp 38598 ( 0.26%) 56649347 ( 0.61%) 1467.68
icecast 14609 ( 0.10%) 15813024 ( 0.17%) 1082.42
other 2731950 ( 18.30%) 1732577588 ( 18.61%) 634.19
udp 2217361 ( 14.85%) 626210987 ( 6.73%) 282.41
dns 1050837 ( 7.04%) 158728137 ( 1.71%) 151.05
realaud 12406 ( 0.08%) 7910556 ( 0.08%) 637.64
halflif 8 ( 0.00%) 782 ( 0.00%) 97.75
starcra 26 ( 0.00%) 5095 ( 0.00%) 195.96
everque 35 ( 0.00%) 5796 ( 0.00%) 165.60
unreal 170 ( 0.00%) 12690 ( 0.00%) 74.65
quake 9 ( 0.00%) 1030 ( 0.00%) 114.44
cuseeme 2 ( 0.00%) 157 ( 0.00%) 78.50
other 1153678 ( 7.73%) 459525921 ( 4.94%) 398.31
icmp 858543 ( 5.75%) 69444155 ( 0.75%) 80.89
ipip 361 ( 0.00%) 46266 ( 0.00%) 128.16
ip6 1122 ( 0.01%) 156637 ( 0.00%) 139.61
other 41108 ( 0.28%) 9930183 ( 0.11%) 241.56
frag 4476 ( 0.03%) 3622408 ( 0.04%) 809.30
ip6 31554 ( 0.21%) 9535663 ( 0.10%) 302.20
tcp6 5093 ( 0.03%) 921926 ( 0.01%) 181.02
http(s) 183 ( 0.00%) 218034 ( 0.00%) 1191.44
http(c) 1978 ( 0.01%) 186969 ( 0.00%) 94.52
smtp 507 ( 0.00%) 245884 ( 0.00%) 484.98
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
dns 8 ( 0.00%) 918 ( 0.00%) 114.75
bgp 72 ( 0.00%) 7964 ( 0.00%) 110.61
other 2311 ( 0.02%) 259029 ( 0.00%) 112.09
udp6 17741 ( 0.12%) 3354397 ( 0.04%) 189.08
dns 15914 ( 0.11%) 2816122 ( 0.03%) 176.96
other 1827 ( 0.01%) 538275 ( 0.01%) 294.62
icmp6 5221 ( 0.03%) 721348 ( 0.01%) 138.16
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3468 ( 0.02%) 4533776 ( 0.05%) 1307.32
tcpdump file: 200803182100.dump.gz (381.51 MB)