Traffic Trace Info
DumpFile: -
Id: 200803190145
StartTime: Wed Mar 19 01:45:00 2008
EndTime: Wed Mar 19 02:00:01 2008
TotalTime: 900.61 seconds
TotalCapSize: 676.56MB CapLen: 96 bytes
# of packets: 12467219 (7433.76MB)
AvgRate: 69.24Mbps stddev:9.48M
IP flow (unique src/dst pair) Information
# of flows: 662803 (avg. 18.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 5.1% 2.3% 1.7% 1.7% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 353806
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.2% 8.4% 7.1% 6.7% 5.4% 5.2% 2.5% 2.5% 2.3%
# of IPv6 addresses: 1637
Top 10 bandwidth usage (bytes/total in %):
54.5% 50.1% 8.6% 7.1% 3.1% 2.9% 2.6% 2.6% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190145.pktlen.png)
detailed numbers
[ 32- 63]: 2838732
[ 64- 127]: 3396164
[ 128- 255]: 834536
[ 256- 511]: 452439
[ 512- 1023]: 302724
[ 1024- 2047]: 4642624
Protocol Breakdown
![[protocol breakdown chart]](200803190145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12467219 (100.00%) 7794860484 (100.00%) 625.23
ip 12437816 ( 99.76%) 7785735602 ( 99.88%) 625.97
tcp 9565438 ( 76.72%) 7158986215 ( 91.84%) 748.42
http(s) 3100236 ( 24.87%) 4249903819 ( 54.52%) 1370.83
http(c) 1776531 ( 14.25%) 201598749 ( 2.59%) 113.48
squid 648253 ( 5.20%) 429697529 ( 5.51%) 662.85
smtp 1057085 ( 8.48%) 179856966 ( 2.31%) 170.14
ftp 84700 ( 0.68%) 7839405 ( 0.10%) 92.55
pop3 6658 ( 0.05%) 4335942 ( 0.06%) 651.24
imap 2626 ( 0.02%) 507306 ( 0.01%) 193.19
telnet 524 ( 0.00%) 33908 ( 0.00%) 64.71
ssh 456256 ( 3.66%) 415935240 ( 5.34%) 911.63
dns 2293 ( 0.02%) 187054 ( 0.00%) 81.58
bgp 204 ( 0.00%) 71801 ( 0.00%) 351.97
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 29 ( 0.00%) 3601 ( 0.00%) 124.17
rtsp 33250 ( 0.27%) 27609414 ( 0.35%) 830.36
icecast 341 ( 0.00%) 24016 ( 0.00%) 70.43
other 2396446 ( 19.22%) 1641381101 ( 21.06%) 684.92
udp 2143953 ( 17.20%) 565130907 ( 7.25%) 263.59
dns 1143353 ( 9.17%) 167948812 ( 2.15%) 146.89
realaud 8724 ( 0.07%) 5456911 ( 0.07%) 625.51
halflif 17 ( 0.00%) 2175 ( 0.00%) 127.94
starcra 33 ( 0.00%) 6807 ( 0.00%) 206.27
everque 27 ( 0.00%) 4265 ( 0.00%) 157.96
unreal 34 ( 0.00%) 4788 ( 0.00%) 140.82
quake 14 ( 0.00%) 1965 ( 0.00%) 140.36
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 991727 ( 7.95%) 391688136 ( 5.02%) 394.96
icmp 714631 ( 5.73%) 59336263 ( 0.76%) 83.03
ipip 296 ( 0.00%) 36214 ( 0.00%) 122.34
ip6 1037 ( 0.01%) 142673 ( 0.00%) 137.58
other 12461 ( 0.10%) 2103330 ( 0.03%) 168.79
frag 1677 ( 0.01%) 1419717 ( 0.02%) 846.58
ip6 29403 ( 0.24%) 9124882 ( 0.12%) 310.34
tcp6 4422 ( 0.04%) 848346 ( 0.01%) 191.85
http(s) 49 ( 0.00%) 55413 ( 0.00%) 1130.88
http(c) 1181 ( 0.01%) 116295 ( 0.00%) 98.47
smtp 926 ( 0.01%) 417340 ( 0.01%) 450.69
pop3 74 ( 0.00%) 7041 ( 0.00%) 95.15
dns 22 ( 0.00%) 2266 ( 0.00%) 103.00
bgp 68 ( 0.00%) 8543 ( 0.00%) 125.63
other 2102 ( 0.02%) 241448 ( 0.00%) 114.87
udp6 16836 ( 0.14%) 3086107 ( 0.04%) 183.30
dns 15400 ( 0.12%) 2780323 ( 0.04%) 180.54
other 1436 ( 0.01%) 305784 ( 0.00%) 212.94
icmp6 4621 ( 0.04%) 615721 ( 0.01%) 133.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3494 ( 0.03%) 4570628 ( 0.06%) 1308.14
tcpdump file: 200803190145.dump.gz (314.63 MB)