Traffic Trace Info
DumpFile: -
Id: 200803190115
StartTime: Wed Mar 19 01:15:00 2008
EndTime: Wed Mar 19 01:30:01 2008
TotalTime: 900.63 seconds
TotalCapSize: 653.53MB CapLen: 96 bytes
# of packets: 12035004 (7124.08MB)
AvgRate: 66.36Mbps stddev:11.64M
IP flow (unique src/dst pair) Information
# of flows: 768314 (avg. 15.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.3% 1.8% 1.7% 1.0% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 432537
Top 10 bandwidth usage (bytes/total in %):
11.9% 9.9% 6.0% 5.4% 5.1% 4.5% 3.1% 2.8% 2.6% 2.6%
# of IPv6 addresses: 1733
Top 10 bandwidth usage (bytes/total in %):
51.9% 47.2% 6.8% 5.5% 5.4% 5.0% 3.6% 3.0% 2.9% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190115.pktlen.png)
detailed numbers
[ 32- 63]: 2755930
[ 64- 127]: 3182042
[ 128- 255]: 864514
[ 256- 511]: 554846
[ 512- 1023]: 229394
[ 1024- 2047]: 4448278
Protocol Breakdown
![[protocol breakdown chart]](200803190115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12035004 (100.00%) 7470134456 (100.00%) 620.70
ip 12000245 ( 99.71%) 7460611356 ( 99.87%) 621.70
tcp 9208113 ( 76.51%) 6786607451 ( 90.85%) 737.02
http(s) 3054846 ( 25.38%) 4192576880 ( 56.12%) 1372.43
http(c) 1776950 ( 14.76%) 224915434 ( 3.01%) 126.57
squid 894223 ( 7.43%) 684472948 ( 9.16%) 765.44
smtp 938401 ( 7.80%) 220541014 ( 2.95%) 235.02
nntp 40743 ( 0.34%) 2495168 ( 0.03%) 61.24
ftp 53419 ( 0.44%) 5009743 ( 0.07%) 93.78
pop3 6018 ( 0.05%) 3091985 ( 0.04%) 513.79
imap 7513 ( 0.06%) 5017324 ( 0.07%) 667.82
telnet 432 ( 0.00%) 27908 ( 0.00%) 64.60
ssh 471721 ( 3.92%) 395310853 ( 5.29%) 838.02
dns 2054 ( 0.02%) 155561 ( 0.00%) 75.74
bgp 214 ( 0.00%) 64835 ( 0.00%) 302.97
napster 16 ( 0.00%) 1532 ( 0.00%) 95.75
realaud 36 ( 0.00%) 4939 ( 0.00%) 137.19
rtsp 33823 ( 0.28%) 30447707 ( 0.41%) 900.21
icecast 383 ( 0.00%) 25681 ( 0.00%) 67.05
hotline 35 ( 0.00%) 2346 ( 0.00%) 67.03
other 1927277 ( 16.01%) 1022445053 ( 13.69%) 530.51
udp 2206000 ( 18.33%) 622976143 ( 8.34%) 282.40
dns 1131682 ( 9.40%) 168800258 ( 2.26%) 149.16
realaud 8720 ( 0.07%) 5459585 ( 0.07%) 626.10
halflif 19 ( 0.00%) 2125 ( 0.00%) 111.84
starcra 105 ( 0.00%) 12118 ( 0.00%) 115.41
everque 28 ( 0.00%) 5102 ( 0.00%) 182.21
unreal 15 ( 0.00%) 2877 ( 0.00%) 191.80
quake 22 ( 0.00%) 2585 ( 0.00%) 117.50
other 1065385 ( 8.85%) 448677650 ( 6.01%) 421.14
icmp 573693 ( 4.77%) 49250274 ( 0.66%) 85.85
ipip 303 ( 0.00%) 37142 ( 0.00%) 122.58
ip6 1063 ( 0.01%) 146035 ( 0.00%) 137.38
other 11073 ( 0.09%) 1594311 ( 0.02%) 143.98
frag 1706 ( 0.01%) 1448842 ( 0.02%) 849.26
ip6 34759 ( 0.29%) 9523100 ( 0.13%) 273.98
tcp6 9668 ( 0.08%) 1232789 ( 0.02%) 127.51
http(c) 1255 ( 0.01%) 121198 ( 0.00%) 96.57
smtp 5646 ( 0.05%) 795514 ( 0.01%) 140.90
ftp 524 ( 0.00%) 62048 ( 0.00%) 118.41
pop3 67 ( 0.00%) 6665 ( 0.00%) 99.48
dns 29 ( 0.00%) 3180 ( 0.00%) 109.66
bgp 78 ( 0.00%) 9069 ( 0.00%) 116.27
other 2069 ( 0.02%) 235115 ( 0.00%) 113.64
udp6 16874 ( 0.14%) 3106350 ( 0.04%) 184.09
dns 15314 ( 0.13%) 2732784 ( 0.04%) 178.45
everque 2 ( 0.00%) 274 ( 0.00%) 137.00
other 1558 ( 0.01%) 373292 ( 0.00%) 239.60
icmp6 4729 ( 0.04%) 664549 ( 0.01%) 140.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3458 ( 0.03%) 4515332 ( 0.06%) 1305.76
tcpdump file: 200803190115.dump.gz (307.37 MB)