Traffic Trace Info
DumpFile: -
Id: 200803182145
StartTime: Tue Mar 18 21:45:00 2008
EndTime: Tue Mar 18 22:00:00 2008
TotalTime: 899.63 seconds
TotalCapSize: 717.76MB CapLen: 96 bytes
# of packets: 12926714 (7375.13MB)
AvgRate: 68.77Mbps stddev:10.91M
IP flow (unique src/dst pair) Information
# of flows: 718532 (avg. 17.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.6% 2.1% 1.9% 1.8% 1.6% 1.4% 1.3% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 404770
Top 10 bandwidth usage (bytes/total in %):
9.7% 8.6% 7.3% 6.0% 5.5% 5.3% 5.2% 2.7% 2.7% 2.7%
# of IPv6 addresses: 1920
Top 10 bandwidth usage (bytes/total in %):
51.7% 47.4% 13.3% 10.6% 4.3% 4.2% 2.4% 2.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182145.pktlen.png)
detailed numbers
[ 32- 63]: 2516658
[ 64- 127]: 4115739
[ 128- 255]: 925978
[ 256- 511]: 438686
[ 512- 1023]: 353513
[ 1024- 2047]: 4576140
Protocol Breakdown
![[protocol breakdown chart]](200803182145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12926714 (100.00%) 7733383926 (100.00%) 598.25
ip 12893155 ( 99.74%) 7723797328 ( 99.88%) 599.06
tcp 10248259 ( 79.28%) 7129406588 ( 92.19%) 695.67
http(s) 3123227 ( 24.16%) 4177340030 ( 54.02%) 1337.51
http(c) 1776002 ( 13.74%) 213972606 ( 2.77%) 120.48
squid 489319 ( 3.79%) 309010630 ( 4.00%) 631.51
smtp 606242 ( 4.69%) 101934198 ( 1.32%) 168.14
ftp 132635 ( 1.03%) 78390165 ( 1.01%) 591.02
pop3 8420 ( 0.07%) 5431443 ( 0.07%) 645.06
imap 6634 ( 0.05%) 2199097 ( 0.03%) 331.49
telnet 361 ( 0.00%) 23344 ( 0.00%) 64.66
ssh 1394199 ( 10.79%) 553703525 ( 7.16%) 397.15
dns 1925 ( 0.01%) 160023 ( 0.00%) 83.13
bgp 286 ( 0.00%) 136878 ( 0.00%) 478.59
napster 11 ( 0.00%) 1046 ( 0.00%) 95.09
realaud 353 ( 0.00%) 194581 ( 0.00%) 551.22
rtsp 33677 ( 0.26%) 36300201 ( 0.47%) 1077.89
icecast 13560 ( 0.10%) 15436692 ( 0.20%) 1138.40
hotline 13 ( 0.00%) 1394 ( 0.00%) 107.23
other 2661395 ( 20.59%) 1635170735 ( 21.14%) 614.40
udp 1922752 ( 14.87%) 523365644 ( 6.77%) 272.20
dns 1019718 ( 7.89%) 151847208 ( 1.96%) 148.91
realaud 11503 ( 0.09%) 7849306 ( 0.10%) 682.37
halflif 21 ( 0.00%) 2559 ( 0.00%) 121.86
starcra 60 ( 0.00%) 8797 ( 0.00%) 146.62
everque 38 ( 0.00%) 5464 ( 0.00%) 143.79
unreal 133 ( 0.00%) 9741 ( 0.00%) 73.24
quake 12 ( 0.00%) 1458 ( 0.00%) 121.50
cuseeme 4 ( 0.00%) 277 ( 0.00%) 69.25
other 891244 ( 6.89%) 363631501 ( 4.70%) 408.00
icmp 647764 ( 5.01%) 54630538 ( 0.71%) 84.34
ipip 327 ( 0.00%) 40516 ( 0.00%) 123.90
ip6 1058 ( 0.01%) 145661 ( 0.00%) 137.68
other 72995 ( 0.56%) 16208381 ( 0.21%) 222.05
frag 1410 ( 0.01%) 1183852 ( 0.02%) 839.61
ip6 33559 ( 0.26%) 9586598 ( 0.12%) 285.66
tcp6 4247 ( 0.03%) 552986 ( 0.01%) 130.21
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1647 ( 0.01%) 170696 ( 0.00%) 103.64
smtp 348 ( 0.00%) 123268 ( 0.00%) 354.22
pop3 36 ( 0.00%) 3368 ( 0.00%) 93.56
dns 19 ( 0.00%) 2089 ( 0.00%) 109.95
bgp 83 ( 0.00%) 11112 ( 0.00%) 133.88
other 2109 ( 0.02%) 241841 ( 0.00%) 114.67
udp6 20922 ( 0.16%) 3817571 ( 0.05%) 182.47
dns 19185 ( 0.15%) 3367233 ( 0.04%) 175.51
other 1737 ( 0.01%) 450338 ( 0.01%) 259.26
icmp6 4890 ( 0.04%) 669543 ( 0.01%) 136.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3470 ( 0.03%) 4542418 ( 0.06%) 1309.05
tcpdump file: 200803182145.dump.gz (343.31 MB)