Traffic Trace Info
DumpFile: -
Id: 200803182130
StartTime: Tue Mar 18 21:30:00 2008
EndTime: Tue Mar 18 21:45:00 2008
TotalTime: 899.95 seconds
TotalCapSize: 833.97MB CapLen: 96 bytes
# of packets: 15127860 (9009.81MB)
AvgRate: 83.97Mbps stddev:15.00M
IP flow (unique src/dst pair) Information
# of flows: 924709 (avg. 16.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 4.4% 2.8% 2.1% 1.9% 1.7% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 580607
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.7% 8.3% 6.7% 6.2% 5.0% 4.5% 4.4% 3.5% 3.2%
# of IPv6 addresses: 1987
Top 10 bandwidth usage (bytes/total in %):
34.4% 33.5% 33.5% 31.4% 4.5% 3.7% 3.7% 3.3% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182130.pktlen.png)
detailed numbers
[ 32- 63]: 3223195
[ 64- 127]: 4400516
[ 128- 255]: 989132
[ 256- 511]: 484729
[ 512- 1023]: 325961
[ 1024- 2047]: 5704327
Protocol Breakdown
![[protocol breakdown chart]](200803182130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15127860 (100.00%) 9447474008 (100.00%) 624.51
ip 15093143 ( 99.77%) 9433395076 ( 99.85%) 625.01
tcp 12133431 ( 80.21%) 8750805573 ( 92.63%) 721.21
http(s) 3713479 ( 24.55%) 5087843888 ( 53.85%) 1370.10
http(c) 1917566 ( 12.68%) 192450876 ( 2.04%) 100.36
squid 571292 ( 3.78%) 420649263 ( 4.45%) 736.31
smtp 667385 ( 4.41%) 101141934 ( 1.07%) 151.55
ftp 90133 ( 0.60%) 46685346 ( 0.49%) 517.96
pop3 8939 ( 0.06%) 5572083 ( 0.06%) 623.35
imap 9109 ( 0.06%) 3533033 ( 0.04%) 387.86
telnet 327 ( 0.00%) 21183 ( 0.00%) 64.78
ssh 1433140 ( 9.47%) 563329649 ( 5.96%) 393.07
dns 3685 ( 0.02%) 1884462 ( 0.02%) 511.39
bgp 196 ( 0.00%) 57732 ( 0.00%) 294.55
napster 10 ( 0.00%) 3992 ( 0.00%) 399.20
realaud 670 ( 0.00%) 345815 ( 0.00%) 516.14
rtsp 41329 ( 0.27%) 59521736 ( 0.63%) 1440.19
icecast 236558 ( 1.56%) 209536765 ( 2.22%) 885.77
other 3439612 ( 22.74%) 2058227756 ( 21.79%) 598.39
udp 2176731 ( 14.39%) 608787499 ( 6.44%) 279.68
dns 1089671 ( 7.20%) 158148330 ( 1.67%) 145.13
realaud 10897 ( 0.07%) 7819222 ( 0.08%) 717.56
halflif 11 ( 0.00%) 1090 ( 0.00%) 99.09
starcra 34 ( 0.00%) 6387 ( 0.00%) 187.85
everque 36 ( 0.00%) 4682 ( 0.00%) 130.06
unreal 81 ( 0.00%) 6523 ( 0.00%) 80.53
quake 15 ( 0.00%) 1301 ( 0.00%) 86.73
other 1075977 ( 7.11%) 442795704 ( 4.69%) 411.53
icmp 725082 ( 4.79%) 60237344 ( 0.64%) 83.08
ipip 344 ( 0.00%) 42472 ( 0.00%) 123.47
ip6 1142 ( 0.01%) 160075 ( 0.00%) 140.17
other 56413 ( 0.37%) 13362113 ( 0.14%) 236.86
frag 1403 ( 0.01%) 1170548 ( 0.01%) 834.32
ip6 34717 ( 0.23%) 14078932 ( 0.15%) 405.53
tcp6 8284 ( 0.05%) 5600444 ( 0.06%) 676.06
http(s) 3610 ( 0.02%) 4864311 ( 0.05%) 1347.45
http(c) 1909 ( 0.01%) 218786 ( 0.00%) 114.61
smtp 563 ( 0.00%) 266451 ( 0.00%) 473.27
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 63 ( 0.00%) 6618 ( 0.00%) 105.05
other 2100 ( 0.01%) 240594 ( 0.00%) 114.57
udp6 17657 ( 0.12%) 3327833 ( 0.04%) 188.47
dns 15625 ( 0.10%) 2712253 ( 0.03%) 173.58
everque 2 ( 0.00%) 692 ( 0.00%) 346.00
other 2030 ( 0.01%) 614888 ( 0.01%) 302.90
icmp6 5355 ( 0.04%) 732661 ( 0.01%) 136.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3391 ( 0.02%) 4413914 ( 0.05%) 1301.66
tcpdump file: 200803182130.dump.gz (386.49 MB)