Traffic Trace Info
DumpFile: -
Id: 200803182245
StartTime: Tue Mar 18 22:45:01 2008
EndTime: Tue Mar 18 23:00:01 2008
TotalTime: 900.18 seconds
TotalCapSize: 888.81MB CapLen: 96 bytes
# of packets: 16165202 (8384.31MB)
AvgRate: 78.12Mbps stddev:14.46M
IP flow (unique src/dst pair) Information
# of flows: 849383 (avg. 19.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 1.9% 1.5% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 471848
Top 10 bandwidth usage (bytes/total in %):
10.6% 9.3% 6.6% 5.0% 4.8% 4.7% 3.0% 3.0% 2.8% 2.2%
# of IPv6 addresses: 2025
Top 10 bandwidth usage (bytes/total in %):
51.1% 46.9% 7.7% 6.6% 5.9% 5.2% 3.2% 2.9% 2.9% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803182245.pktlen.png)
detailed numbers
[ 32- 63]: 3666081
[ 64- 127]: 4963985
[ 128- 255]: 1556016
[ 256- 511]: 539748
[ 512- 1023]: 346373
[ 1024- 2047]: 5092999
Protocol Breakdown
![[protocol breakdown chart]](200803182245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16165202 (100.00%) 8791590680 (100.00%) 543.86
ip 16130896 ( 99.79%) 8781870820 ( 99.89%) 544.41
tcp 12569360 ( 77.76%) 8037633619 ( 91.42%) 639.46
http(s) 3647630 ( 22.56%) 4958001447 ( 56.39%) 1359.24
http(c) 2214359 ( 13.70%) 306729478 ( 3.49%) 138.52
squid 519470 ( 3.21%) 384986463 ( 4.38%) 741.11
smtp 808374 ( 5.00%) 138935826 ( 1.58%) 171.87
ftp 119051 ( 0.74%) 50441362 ( 0.57%) 423.70
pop3 6828 ( 0.04%) 3101867 ( 0.04%) 454.29
imap 4258 ( 0.03%) 1894199 ( 0.02%) 444.86
telnet 21 ( 0.00%) 1630 ( 0.00%) 77.62
ssh 1376324 ( 8.51%) 552921625 ( 6.29%) 401.74
dns 2165 ( 0.01%) 164695 ( 0.00%) 76.07
bgp 196 ( 0.00%) 64397 ( 0.00%) 328.56
napster 19 ( 0.00%) 3226 ( 0.00%) 169.79
realaud 43 ( 0.00%) 7323 ( 0.00%) 170.30
rtsp 76220 ( 0.47%) 76140075 ( 0.87%) 998.95
icecast 13067 ( 0.08%) 15284700 ( 0.17%) 1169.72
hotline 13 ( 0.00%) 1386 ( 0.00%) 106.62
other 3781316 ( 23.39%) 1548953560 ( 17.62%) 409.63
udp 2332571 ( 14.43%) 640622691 ( 7.29%) 274.64
dns 1282173 ( 7.93%) 185877806 ( 2.11%) 144.97
realaud 9578 ( 0.06%) 5505255 ( 0.06%) 574.78
halflif 22 ( 0.00%) 2537 ( 0.00%) 115.32
starcra 39 ( 0.00%) 7896 ( 0.00%) 202.46
everque 35 ( 0.00%) 7543 ( 0.00%) 215.51
unreal 274 ( 0.00%) 18637 ( 0.00%) 68.02
quake 17 ( 0.00%) 2215 ( 0.00%) 130.29
cuseeme 4 ( 0.00%) 772 ( 0.00%) 193.00
other 1040404 ( 6.44%) 449191077 ( 5.11%) 431.75
icmp 1172224 ( 7.25%) 92517644 ( 1.05%) 78.92
ipip 352 ( 0.00%) 44104 ( 0.00%) 125.30
ip6 976 ( 0.01%) 129058 ( 0.00%) 132.23
other 55413 ( 0.34%) 10923704 ( 0.12%) 197.13
frag 1858 ( 0.01%) 1517198 ( 0.02%) 816.58
ip6 34306 ( 0.21%) 9719860 ( 0.11%) 283.33
tcp6 4296 ( 0.03%) 592731 ( 0.01%) 137.97
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1698 ( 0.01%) 182029 ( 0.00%) 107.20
smtp 290 ( 0.00%) 151072 ( 0.00%) 520.94
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 65 ( 0.00%) 6913 ( 0.00%) 106.35
other 2202 ( 0.01%) 248811 ( 0.00%) 112.99
udp6 21621 ( 0.13%) 3894474 ( 0.04%) 180.12
dns 19641 ( 0.12%) 3356458 ( 0.04%) 170.89
everque 2 ( 0.00%) 655 ( 0.00%) 327.50
other 1978 ( 0.01%) 537361 ( 0.01%) 271.67
icmp6 4866 ( 0.03%) 671801 ( 0.01%) 138.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3493 ( 0.02%) 4556774 ( 0.05%) 1304.54
tcpdump file: 200803182245.dump.gz (409.82 MB)