Traffic Trace Info
DumpFile: 200803180245.dump
FileSize: 1.73MB
Id: 200803180245
StartTime: Tue Mar 18 02:45:00 2008
EndTime: Tue Mar 18 02:45:02 2008
TotalTime: 1.91 seconds
TotalCapSize: 1.35MB CapLen: 96 bytes
# of packets: 24659 (11.86MB)
AvgRate: 52.83Mbps stddev:0.00M
IP flow (unique src/dst pair) Information
# of flows: 5350 (avg. 4.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 5.7% 3.9% 3.4% 3.4% 2.9% 2.5% 2.4% 2.3% 2.1%
IP address Information
# of IPv4 addresses: 4366
Top 10 bandwidth usage (bytes/total in %):
16.8% 11.3% 9.3% 9.3% 8.4% 6.3% 5.8% 4.0% 4.0% 3.5%
# of IPv6 addresses: 38
Top 10 bandwidth usage (bytes/total in %):
22.7% 20.6% 18.7% 18.1% 14.0% 12.0% 8.6% 7.0% 6.0% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180245.pktlen.png)
detailed numbers
[ 32- 63]: 5679
[ 64- 127]: 8235
[ 128- 255]: 1616
[ 256- 511]: 1485
[ 512- 1023]: 727
[ 1024- 2047]: 6917
Protocol Breakdown
![[protocol breakdown chart]](200803180245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24659 (100.00%) 12438371 (100.00%) 504.42
ip 24604 ( 99.78%) 12429529 ( 99.93%) 505.18
tcp 19461 ( 78.92%) 11367438 ( 91.39%) 584.11
http(s) 4106 ( 16.65%) 5295668 ( 42.58%) 1289.74
http(c) 2949 ( 11.96%) 496864 ( 3.99%) 168.49
squid 667 ( 2.70%) 438298 ( 3.52%) 657.12
smtp 1705 ( 6.91%) 235506 ( 1.89%) 138.13
ftp 291 ( 1.18%) 82461 ( 0.66%) 283.37
pop3 22 ( 0.09%) 15623 ( 0.13%) 710.14
imap 1 ( 0.00%) 66 ( 0.00%) 66.00
telnet 6 ( 0.02%) 390 ( 0.00%) 65.00
ssh 4990 ( 20.24%) 2183885 ( 17.56%) 437.65
dns 9 ( 0.04%) 540 ( 0.00%) 60.00
rtsp 197 ( 0.80%) 289972 ( 2.33%) 1471.94
icecast 28 ( 0.11%) 34620 ( 0.28%) 1236.43
other 4490 ( 18.21%) 2293545 ( 18.44%) 510.81
udp 3673 ( 14.90%) 938533 ( 7.55%) 255.52
dns 1954 ( 7.92%) 309805 ( 2.49%) 158.55
other 1719 ( 6.97%) 628728 ( 5.05%) 365.75
icmp 1444 ( 5.86%) 120330 ( 0.97%) 83.33
ipip 8 ( 0.03%) 1040 ( 0.01%) 130.00
ip6 4 ( 0.02%) 548 ( 0.00%) 137.00
other 14 ( 0.06%) 1640 ( 0.01%) 117.14
frag 17 ( 0.07%) 14234 ( 0.11%) 837.29
ip6 55 ( 0.22%) 8842 ( 0.07%) 160.76
tcp6 3 ( 0.01%) 458 ( 0.00%) 152.67
http(c) 3 ( 0.01%) 458 ( 0.00%) 152.67
udp6 42 ( 0.17%) 7348 ( 0.06%) 174.95
dns 39 ( 0.16%) 6979 ( 0.06%) 178.95
other 3 ( 0.01%) 369 ( 0.00%) 123.00
icmp6 10 ( 0.04%) 1036 ( 0.01%) 103.60
tcpdump file: 200803180245.dump (1.73 MB)