Traffic Trace Info
DumpFile: -
Id: 200803190030
StartTime: Wed Mar 19 00:30:01 2008
EndTime: Wed Mar 19 00:45:01 2008
TotalTime: 900.18 seconds
TotalCapSize: 894.77MB CapLen: 96 bytes
# of packets: 16064839 (9764.69MB)
AvgRate: 90.99Mbps stddev:32.75M
IP flow (unique src/dst pair) Information
# of flows: 726680 (avg. 22.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.7% 3.9% 1.4% 1.4% 1.0% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 400203
Top 10 bandwidth usage (bytes/total in %):
18.1% 17.1% 8.9% 7.8% 4.8% 4.0% 4.0% 4.0% 3.5% 2.5%
# of IPv6 addresses: 1706
Top 10 bandwidth usage (bytes/total in %):
46.1% 42.1% 17.4% 8.8% 8.7% 3.6% 3.2% 2.9% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190030.pktlen.png)
detailed numbers
[ 32- 63]: 3147940
[ 64- 127]: 5090519
[ 128- 255]: 846137
[ 256- 511]: 528642
[ 512- 1023]: 305483
[ 1024- 2047]: 6146118
Protocol Breakdown
![[protocol breakdown chart]](200803190030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16064839 (100.00%) 10239019286 (100.00%) 637.36
ip 16029024 ( 99.78%) 10228181729 ( 99.89%) 638.10
tcp 13203497 ( 82.19%) 9519558895 ( 92.97%) 720.99
http(s) 4645185 ( 28.92%) 6496463599 ( 63.45%) 1398.54
http(c) 2572992 ( 16.02%) 249165206 ( 2.43%) 96.84
squid 969825 ( 6.04%) 706905776 ( 6.90%) 728.90
smtp 726233 ( 4.52%) 121454448 ( 1.19%) 167.24
ftp 86281 ( 0.54%) 30318515 ( 0.30%) 351.39
pop3 5189 ( 0.03%) 3099446 ( 0.03%) 597.31
imap 3517 ( 0.02%) 1445841 ( 0.01%) 411.10
telnet 23 ( 0.00%) 1747 ( 0.00%) 75.96
ssh 474564 ( 2.95%) 419314139 ( 4.10%) 883.58
dns 4178 ( 0.03%) 1939072 ( 0.02%) 464.11
bgp 207 ( 0.00%) 70093 ( 0.00%) 338.61
napster 13 ( 0.00%) 2830 ( 0.00%) 217.69
realaud 16 ( 0.00%) 2373 ( 0.00%) 148.31
rtsp 32012 ( 0.20%) 27979296 ( 0.27%) 874.03
icecast 8365 ( 0.05%) 7854877 ( 0.08%) 939.02
other 3674892 ( 22.88%) 1453541337 ( 14.20%) 395.53
udp 2240075 ( 13.94%) 655687585 ( 6.40%) 292.71
dns 1179184 ( 7.34%) 174170656 ( 1.70%) 147.70
realaud 8715 ( 0.05%) 5455888 ( 0.05%) 626.03
halflif 17 ( 0.00%) 1564 ( 0.00%) 92.00
starcra 38 ( 0.00%) 6825 ( 0.00%) 179.61
everque 32 ( 0.00%) 6078 ( 0.00%) 189.94
unreal 17 ( 0.00%) 2100 ( 0.00%) 123.53
quake 9 ( 0.00%) 1301 ( 0.00%) 144.56
other 1051736 ( 6.55%) 476017450 ( 4.65%) 452.60
icmp 547458 ( 3.41%) 47678330 ( 0.47%) 87.09
ipip 353 ( 0.00%) 44510 ( 0.00%) 126.09
ip6 1153 ( 0.01%) 161572 ( 0.00%) 140.13
other 36488 ( 0.23%) 5050837 ( 0.05%) 138.42
frag 4602 ( 0.03%) 3575815 ( 0.03%) 777.01
ip6 35815 ( 0.22%) 10837557 ( 0.11%) 302.60
tcp6 6962 ( 0.04%) 1966345 ( 0.02%) 282.44
http(s) 165 ( 0.00%) 203833 ( 0.00%) 1235.35
http(c) 1698 ( 0.01%) 165612 ( 0.00%) 97.53
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 891 ( 0.01%) 345565 ( 0.00%) 387.84
pop3 142 ( 0.00%) 13336 ( 0.00%) 93.92
ssh 1234 ( 0.01%) 223980 ( 0.00%) 181.51
dns 5 ( 0.00%) 417 ( 0.00%) 83.40
bgp 99 ( 0.00%) 33543 ( 0.00%) 338.82
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2725 ( 0.02%) 979837 ( 0.01%) 359.57
udp6 20348 ( 0.13%) 3635157 ( 0.04%) 178.65
dns 18845 ( 0.12%) 3308883 ( 0.03%) 175.58
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1502 ( 0.01%) 326137 ( 0.00%) 217.14
icmp6 4981 ( 0.03%) 667932 ( 0.01%) 134.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3494 ( 0.02%) 4564043 ( 0.04%) 1306.25
tcpdump file: 200803190030.dump.gz (393.63 MB)