Traffic Trace Info
DumpFile: -
Id: 200803190130
StartTime: Wed Mar 19 01:30:01 2008
EndTime: Wed Mar 19 01:45:00 2008
TotalTime: 899.41 seconds
TotalCapSize: 681.27MB CapLen: 96 bytes
# of packets: 12550432 (7450.38MB)
AvgRate: 69.50Mbps stddev:10.47M
IP flow (unique src/dst pair) Information
# of flows: 686659 (avg. 18.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 4.8% 2.1% 1.7% 1.7% 1.7% 1.3% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 370614
Top 10 bandwidth usage (bytes/total in %):
9.9% 9.5% 8.6% 7.7% 6.2% 5.2% 5.0% 4.3% 3.3% 2.2%
# of IPv6 addresses: 1997
Top 10 bandwidth usage (bytes/total in %):
39.2% 35.9% 24.9% 24.7% 5.5% 3.4% 2.8% 2.2% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190130.pktlen.png)
detailed numbers
[ 32- 63]: 3012049
[ 64- 127]: 3321305
[ 128- 255]: 861930
[ 256- 511]: 437526
[ 512- 1023]: 259605
[ 1024- 2047]: 4658017
Protocol Breakdown
![[protocol breakdown chart]](200803190130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12550432 (100.00%) 7812292303 (100.00%) 622.47
ip 12519014 ( 99.75%) 7800089218 ( 99.84%) 623.06
tcp 9863713 ( 78.59%) 7252283041 ( 92.83%) 735.25
http(s) 3407231 ( 27.15%) 4742427143 ( 60.70%) 1391.87
http(c) 1929751 ( 15.38%) 191397358 ( 2.45%) 99.18
squid 802850 ( 6.40%) 562874528 ( 7.20%) 701.10
smtp 911746 ( 7.26%) 151646298 ( 1.94%) 166.33
nntp 191106 ( 1.52%) 11701948 ( 0.15%) 61.23
ftp 66825 ( 0.53%) 5753453 ( 0.07%) 86.10
pop3 6860 ( 0.05%) 4309661 ( 0.06%) 628.23
imap 2931 ( 0.02%) 650933 ( 0.01%) 222.09
telnet 462 ( 0.00%) 29902 ( 0.00%) 64.72
ssh 461817 ( 3.68%) 397989322 ( 5.09%) 861.79
dns 3962 ( 0.03%) 1904999 ( 0.02%) 480.82
bgp 233 ( 0.00%) 91310 ( 0.00%) 391.89
realaud 5 ( 0.00%) 693 ( 0.00%) 138.60
rtsp 31965 ( 0.25%) 27917083 ( 0.36%) 873.36
icecast 403 ( 0.00%) 30755 ( 0.00%) 76.32
hotline 8 ( 0.00%) 555 ( 0.00%) 69.38
other 2045551 ( 16.30%) 1153556680 ( 14.77%) 563.93
udp 2069472 ( 16.49%) 495972510 ( 6.35%) 239.66
dns 1213737 ( 9.67%) 176485789 ( 2.26%) 145.41
realaud 8692 ( 0.07%) 5449492 ( 0.07%) 626.95
halflif 22 ( 0.00%) 2602 ( 0.00%) 118.27
starcra 33 ( 0.00%) 4885 ( 0.00%) 148.03
everque 16 ( 0.00%) 2734 ( 0.00%) 170.88
unreal 43 ( 0.00%) 4503 ( 0.00%) 104.72
quake 11 ( 0.00%) 1202 ( 0.00%) 109.27
cuseeme 6 ( 0.00%) 427 ( 0.00%) 71.17
other 846892 ( 6.75%) 314004140 ( 4.02%) 370.77
icmp 573114 ( 4.57%) 49525380 ( 0.63%) 86.41
ipip 365 ( 0.00%) 46986 ( 0.00%) 128.73
ip6 1166 ( 0.01%) 162279 ( 0.00%) 139.18
other 11184 ( 0.09%) 2099022 ( 0.03%) 187.68
frag 1618 ( 0.01%) 1385972 ( 0.02%) 856.60
ip6 31418 ( 0.25%) 12203085 ( 0.16%) 388.41
tcp6 7166 ( 0.06%) 3996171 ( 0.05%) 557.66
http(s) 165 ( 0.00%) 203845 ( 0.00%) 1235.42
http(c) 1477 ( 0.01%) 150513 ( 0.00%) 101.90
smtp 3071 ( 0.02%) 3362762 ( 0.04%) 1095.01
pop3 101 ( 0.00%) 10084 ( 0.00%) 99.84
dns 9 ( 0.00%) 1003 ( 0.00%) 111.44
bgp 83 ( 0.00%) 11103 ( 0.00%) 133.77
other 2260 ( 0.02%) 256861 ( 0.00%) 113.66
udp6 15794 ( 0.13%) 3141849 ( 0.04%) 198.93
dns 13632 ( 0.11%) 2467223 ( 0.03%) 180.99
everque 1 ( 0.00%) 552 ( 0.00%) 552.00
other 2161 ( 0.02%) 674074 ( 0.01%) 311.93
icmp6 5094 ( 0.04%) 723365 ( 0.01%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3334 ( 0.03%) 4337620 ( 0.06%) 1301.03
tcpdump file: 200803190130.dump.gz (319.68 MB)