Traffic Trace Info
DumpFile: -
Id: 200803190100
StartTime: Wed Mar 19 01:00:00 2008
EndTime: Wed Mar 19 01:15:00 2008
TotalTime: 899.81 seconds
TotalCapSize: 650.92MB CapLen: 96 bytes
# of packets: 11938970 (6944.83MB)
AvgRate: 64.75Mbps stddev:11.26M
IP flow (unique src/dst pair) Information
# of flows: 765485 (avg. 15.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.5% 1.6% 1.2% 1.2% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 427023
Top 10 bandwidth usage (bytes/total in %):
10.4% 10.4% 6.7% 5.7% 5.7% 5.4% 3.2% 3.0% 2.9% 2.6%
# of IPv6 addresses: 1656
Top 10 bandwidth usage (bytes/total in %):
60.6% 60.5% 21.7% 19.9% 2.7% 2.3% 1.3% 1.2% 1.2% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190100.pktlen.png)
detailed numbers
[ 32- 63]: 2852997
[ 64- 127]: 3205909
[ 128- 255]: 762912
[ 256- 511]: 511433
[ 512- 1023]: 296385
[ 1024- 2047]: 4309334
Protocol Breakdown
![[protocol breakdown chart]](200803190100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11938970 (100.00%) 7282186322 (100.00%) 609.95
ip 11900374 ( 99.68%) 7259895274 ( 99.69%) 610.06
tcp 9164525 ( 76.76%) 6615202938 ( 90.84%) 721.83
http(s) 3051004 ( 25.56%) 4089066464 ( 56.15%) 1340.24
http(c) 1691316 ( 14.17%) 239834402 ( 3.29%) 141.80
squid 715140 ( 5.99%) 550144555 ( 7.55%) 769.28
smtp 866087 ( 7.25%) 193687729 ( 2.66%) 223.64
ftp 54724 ( 0.46%) 5478232 ( 0.08%) 100.11
pop3 4334 ( 0.04%) 2156476 ( 0.03%) 497.57
imap 4250 ( 0.04%) 1026879 ( 0.01%) 241.62
telnet 190 ( 0.00%) 12574 ( 0.00%) 66.18
ssh 439626 ( 3.68%) 398303945 ( 5.47%) 906.01
dns 2061 ( 0.02%) 214848 ( 0.00%) 104.24
bgp 216 ( 0.00%) 74687 ( 0.00%) 345.77
napster 16 ( 0.00%) 2100 ( 0.00%) 131.25
realaud 4 ( 0.00%) 633 ( 0.00%) 158.25
rtsp 34632 ( 0.29%) 28528654 ( 0.39%) 823.77
icecast 372 ( 0.00%) 24910 ( 0.00%) 66.96
hotline 15 ( 0.00%) 966 ( 0.00%) 64.40
other 2300534 ( 19.27%) 1106644644 ( 15.20%) 481.04
udp 2107324 ( 17.65%) 589888423 ( 8.10%) 279.92
dns 1165936 ( 9.77%) 172085206 ( 2.36%) 147.59
realaud 9031 ( 0.08%) 5475233 ( 0.08%) 606.27
halflif 16 ( 0.00%) 1245 ( 0.00%) 77.81
starcra 101 ( 0.00%) 13093 ( 0.00%) 129.63
everque 23 ( 0.00%) 3323 ( 0.00%) 144.48
unreal 28 ( 0.00%) 2975 ( 0.00%) 106.25
quake 8 ( 0.00%) 1973 ( 0.00%) 246.62
other 932127 ( 7.81%) 412286663 ( 5.66%) 442.31
icmp 609265 ( 5.10%) 51625195 ( 0.71%) 84.73
ipip 367 ( 0.00%) 47024 ( 0.00%) 128.13
ip6 1057 ( 0.01%) 146375 ( 0.00%) 138.48
other 17836 ( 0.15%) 2985319 ( 0.04%) 167.38
frag 1754 ( 0.01%) 1465924 ( 0.02%) 835.76
ip6 38596 ( 0.32%) 22291048 ( 0.31%) 577.55
tcp6 13631 ( 0.11%) 14149985 ( 0.19%) 1038.07
http(s) 51 ( 0.00%) 61099 ( 0.00%) 1198.02
http(c) 1424 ( 0.01%) 139577 ( 0.00%) 98.02
smtp 9745 ( 0.08%) 13676498 ( 0.19%) 1403.44
ftp 18 ( 0.00%) 1502 ( 0.00%) 83.44
pop3 98 ( 0.00%) 9541 ( 0.00%) 97.36
dns 10 ( 0.00%) 1088 ( 0.00%) 108.80
bgp 75 ( 0.00%) 9514 ( 0.00%) 126.85
other 2210 ( 0.02%) 251166 ( 0.00%) 113.65
udp6 16602 ( 0.14%) 3040958 ( 0.04%) 183.17
dns 15133 ( 0.13%) 2740903 ( 0.04%) 181.12
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1468 ( 0.01%) 299913 ( 0.00%) 204.30
icmp6 4922 ( 0.04%) 657293 ( 0.01%) 133.54
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3410 ( 0.03%) 4438596 ( 0.06%) 1301.64
tcpdump file: 200803190100.dump.gz (303.41 MB)