Traffic Trace Info
DumpFile: -
Id: 200803182200
StartTime: Tue Mar 18 22:00:00 2008
EndTime: Tue Mar 18 22:15:01 2008
TotalTime: 900.85 seconds
TotalCapSize: 748.05MB CapLen: 96 bytes
# of packets: 13474667 (7583.99MB)
AvgRate: 70.63Mbps stddev:10.24M
IP flow (unique src/dst pair) Information
# of flows: 721065 (avg. 18.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.7% 2.1% 1.4% 1.3% 1.3% 1.2% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 373506
Top 10 bandwidth usage (bytes/total in %):
10.5% 10.3% 7.0% 6.7% 5.3% 5.1% 4.3% 3.3% 2.8% 2.1%
# of IPv6 addresses: 1805
Top 10 bandwidth usage (bytes/total in %):
51.7% 47.1% 6.1% 5.9% 5.8% 3.2% 2.9% 2.7% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182200.pktlen.png)
detailed numbers
[ 32- 63]: 2552740
[ 64- 127]: 4393987
[ 128- 255]: 1068529
[ 256- 511]: 444243
[ 512- 1023]: 313574
[ 1024- 2047]: 4701594
Protocol Breakdown
![[protocol breakdown chart]](200803182200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13474667 (100.00%) 7952394811 (100.00%) 590.17
ip 13440864 ( 99.75%) 7942998249 ( 99.88%) 590.96
tcp 10411908 ( 77.27%) 7261229871 ( 91.31%) 697.40
http(s) 3261941 ( 24.21%) 4374678789 ( 55.01%) 1341.13
http(c) 1813865 ( 13.46%) 201978921 ( 2.54%) 111.35
squid 624082 ( 4.63%) 479238809 ( 6.03%) 767.91
smtp 865632 ( 6.42%) 132876269 ( 1.67%) 153.50
ftp 149959 ( 1.11%) 91958586 ( 1.16%) 613.22
pop3 7826 ( 0.06%) 5042942 ( 0.06%) 644.38
imap 6866 ( 0.05%) 2181901 ( 0.03%) 317.78
telnet 407 ( 0.00%) 26301 ( 0.00%) 64.62
ssh 1338040 ( 9.93%) 546358111 ( 6.87%) 408.33
dns 2079 ( 0.02%) 168761 ( 0.00%) 81.17
bgp 278 ( 0.00%) 118460 ( 0.00%) 426.12
napster 6 ( 0.00%) 374 ( 0.00%) 62.33
realaud 89 ( 0.00%) 18074 ( 0.00%) 203.08
rtsp 4243 ( 0.03%) 2995018 ( 0.04%) 705.87
icecast 13700 ( 0.10%) 15671709 ( 0.20%) 1143.92
hotline 13 ( 0.00%) 1800 ( 0.00%) 138.46
other 2322881 ( 17.24%) 1407914986 ( 17.70%) 606.11
udp 2251091 ( 16.71%) 606090031 ( 7.62%) 269.24
dns 1240103 ( 9.20%) 183047205 ( 2.30%) 147.61
realaud 9589 ( 0.07%) 5516993 ( 0.07%) 575.35
halflif 10 ( 0.00%) 846 ( 0.00%) 84.60
starcra 28 ( 0.00%) 6183 ( 0.00%) 220.82
everque 24 ( 0.00%) 5722 ( 0.00%) 238.42
unreal 145 ( 0.00%) 11105 ( 0.00%) 76.59
quake 11 ( 0.00%) 3523 ( 0.00%) 320.27
other 1001123 ( 7.43%) 417473539 ( 5.25%) 417.01
icmp 696127 ( 5.17%) 58955763 ( 0.74%) 84.69
ipip 334 ( 0.00%) 42080 ( 0.00%) 125.99
ip6 1081 ( 0.01%) 149815 ( 0.00%) 138.59
other 80323 ( 0.60%) 16530689 ( 0.21%) 205.80
frag 4653 ( 0.03%) 3671434 ( 0.05%) 789.05
ip6 33803 ( 0.25%) 9396562 ( 0.12%) 277.98
tcp6 4733 ( 0.04%) 630343 ( 0.01%) 133.18
http(c) 1662 ( 0.01%) 168075 ( 0.00%) 101.13
smtp 631 ( 0.00%) 194083 ( 0.00%) 307.58
pop3 45 ( 0.00%) 4108 ( 0.00%) 91.29
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2326 ( 0.02%) 257006 ( 0.00%) 110.49
udp6 20438 ( 0.15%) 3624087 ( 0.05%) 177.32
dns 18754 ( 0.14%) 3153931 ( 0.04%) 168.17
everque 2 ( 0.00%) 253 ( 0.00%) 126.50
other 1682 ( 0.01%) 469903 ( 0.01%) 279.37
icmp6 5195 ( 0.04%) 710324 ( 0.01%) 136.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3406 ( 0.03%) 4427592 ( 0.06%) 1299.94
tcpdump file: 200803182200.dump.gz (360.66 MB)