Traffic Trace Info
DumpFile: 200803180145.dump
FileSize: 1.08MB
Id: 200803180145
StartTime: Tue Mar 18 01:45:00 2008
EndTime: Tue Mar 18 01:45:01 2008
TotalTime: 1.07 seconds
TotalCapSize: 0.84MB CapLen: 96 bytes
# of packets: 15355 (8.16MB)
AvgRate: 63.85Mbps stddev:-0.00M
IP flow (unique src/dst pair) Information
# of flows: 3525 (avg. 4.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 4.7% 4.2% 3.2% 3.1% 2.5% 1.8% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 2940
Top 10 bandwidth usage (bytes/total in %):
13.7% 13.4% 7.6% 7.6% 5.8% 5.2% 4.7% 4.7% 4.4% 4.3%
# of IPv6 addresses: 29
Top 10 bandwidth usage (bytes/total in %):
26.8% 16.7% 14.1% 14.1% 12.5% 12.5% 11.6% 8.5% 8.4% 8.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180145.pktlen.png)
detailed numbers
[ 32- 63]: 3444
[ 64- 127]: 4626
[ 128- 255]: 1047
[ 256- 511]: 789
[ 512- 1023]: 500
[ 1024- 2047]: 4949
Protocol Breakdown
![[protocol breakdown chart]](200803180145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15355 (100.00%) 8559352 (100.00%) 557.43
ip 15331 ( 99.84%) 8555106 ( 99.95%) 558.03
tcp 12395 ( 80.72%) 7930583 ( 92.65%) 639.82
http(s) 3655 ( 23.80%) 5048122 ( 58.98%) 1381.16
http(c) 2111 ( 13.75%) 245968 ( 2.87%) 116.52
squid 264 ( 1.72%) 82454 ( 0.96%) 312.33
smtp 941 ( 6.13%) 116444 ( 1.36%) 123.74
ftp 185 ( 1.20%) 51608 ( 0.60%) 278.96
pop3 5 ( 0.03%) 329 ( 0.00%) 65.80
ssh 2518 ( 16.40%) 848624 ( 9.91%) 337.02
bgp 2 ( 0.01%) 1182 ( 0.01%) 591.00
rtsp 37 ( 0.24%) 32668 ( 0.38%) 882.92
icecast 14 ( 0.09%) 17310 ( 0.20%) 1236.43
other 2663 ( 17.34%) 1485874 ( 17.36%) 557.97
udp 2154 ( 14.03%) 550657 ( 6.43%) 255.64
dns 1328 ( 8.65%) 189098 ( 2.21%) 142.39
realaud 2 ( 0.01%) 120 ( 0.00%) 60.00
other 824 ( 5.37%) 361439 ( 4.22%) 438.64
icmp 777 ( 5.06%) 72970 ( 0.85%) 93.91
ipip 1 ( 0.01%) 102 ( 0.00%) 102.00
ip6 1 ( 0.01%) 130 ( 0.00%) 130.00
other 3 ( 0.02%) 664 ( 0.01%) 221.33
frag 4 ( 0.03%) 3150 ( 0.04%) 787.50
ip6 24 ( 0.16%) 4246 ( 0.05%) 176.92
tcp6 6 ( 0.04%) 792 ( 0.01%) 132.00
http(c) 1 ( 0.01%) 94 ( 0.00%) 94.00
smtp 1 ( 0.01%) 100 ( 0.00%) 100.00
other 4 ( 0.03%) 598 ( 0.01%) 149.50
udp6 16 ( 0.10%) 3151 ( 0.04%) 196.94
dns 13 ( 0.08%) 2740 ( 0.03%) 210.77
other 3 ( 0.02%) 411 ( 0.00%) 137.00
icmp6 2 ( 0.01%) 303 ( 0.00%) 151.50
tcpdump file: 200803180145.dump (1.08 MB)