Traffic Trace Info
DumpFile: -
Id: 200803190230
StartTime: Wed Mar 19 02:30:00 2008
EndTime: Wed Mar 19 02:45:01 2008
TotalTime: 900.04 seconds
TotalCapSize: 714.06MB CapLen: 96 bytes
# of packets: 12804789 (8111.12MB)
AvgRate: 75.60Mbps stddev:10.59M
IP flow (unique src/dst pair) Information
# of flows: 709185 (avg. 18.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.5% 4.3% 1.9% 1.2% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 391327
Top 10 bandwidth usage (bytes/total in %):
19.6% 15.0% 10.7% 8.3% 5.8% 4.8% 4.5% 2.8% 2.2% 2.1%
# of IPv6 addresses: 1807
Top 10 bandwidth usage (bytes/total in %):
51.6% 47.5% 6.3% 5.3% 4.5% 3.8% 3.7% 3.7% 2.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190230.pktlen.png)
detailed numbers
[ 32- 63]: 2459466
[ 64- 127]: 3732631
[ 128- 255]: 733268
[ 256- 511]: 471262
[ 512- 1023]: 234224
[ 1024- 2047]: 5173938
Protocol Breakdown
![[protocol breakdown chart]](200803190230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12804789 (100.00%) 8505124354 (100.00%) 664.21
ip 12773589 ( 99.76%) 8495539595 ( 99.89%) 665.09
tcp 10166425 ( 79.40%) 7820785670 ( 91.95%) 769.28
http(s) 3011050 ( 23.52%) 4117662846 ( 48.41%) 1367.52
http(c) 1662872 ( 12.99%) 182135660 ( 2.14%) 109.53
squid 730273 ( 5.70%) 524849723 ( 6.17%) 718.70
smtp 770376 ( 6.02%) 123101491 ( 1.45%) 159.79
ftp 68667 ( 0.54%) 5688165 ( 0.07%) 82.84
pop3 4517 ( 0.04%) 1953581 ( 0.02%) 432.50
imap 2985 ( 0.02%) 583244 ( 0.01%) 195.39
telnet 3118 ( 0.02%) 200908 ( 0.00%) 64.43
ssh 468820 ( 3.66%) 391952199 ( 4.61%) 836.04
dns 6543 ( 0.05%) 3854794 ( 0.05%) 589.15
bgp 191 ( 0.00%) 52823 ( 0.00%) 276.56
napster 17 ( 0.00%) 1134 ( 0.00%) 66.71
realaud 4 ( 0.00%) 633 ( 0.00%) 158.25
rtsp 102 ( 0.00%) 29420 ( 0.00%) 288.43
icecast 311 ( 0.00%) 21108 ( 0.00%) 67.87
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 3436572 ( 26.84%) 2468697493 ( 29.03%) 718.36
udp 2017409 ( 15.76%) 623407205 ( 7.33%) 309.01
dns 1015104 ( 7.93%) 151300835 ( 1.78%) 149.05
realaud 8708 ( 0.07%) 5454885 ( 0.06%) 626.42
halflif 17 ( 0.00%) 2014 ( 0.00%) 118.47
starcra 36 ( 0.00%) 6749 ( 0.00%) 187.47
everque 29 ( 0.00%) 4695 ( 0.00%) 161.90
unreal 59 ( 0.00%) 5119 ( 0.00%) 86.76
quake 14 ( 0.00%) 1856 ( 0.00%) 132.57
cuseeme 5 ( 0.00%) 731 ( 0.00%) 146.20
other 993423 ( 7.76%) 466623483 ( 5.49%) 469.71
icmp 580113 ( 4.53%) 49938159 ( 0.59%) 86.08
ipip 371 ( 0.00%) 45082 ( 0.00%) 121.51
ip6 1132 ( 0.01%) 160635 ( 0.00%) 141.90
other 8139 ( 0.06%) 1202844 ( 0.01%) 147.79
frag 1335 ( 0.01%) 1118735 ( 0.01%) 838.00
ip6 31200 ( 0.24%) 9584759 ( 0.11%) 307.20
tcp6 5108 ( 0.04%) 987439 ( 0.01%) 193.31
http(s) 164 ( 0.00%) 203759 ( 0.00%) 1242.43
http(c) 1381 ( 0.01%) 140641 ( 0.00%) 101.84
smtp 885 ( 0.01%) 350090 ( 0.00%) 395.58
ftp 17 ( 0.00%) 1771 ( 0.00%) 104.18
pop3 96 ( 0.00%) 9535 ( 0.00%) 99.32
dns 12 ( 0.00%) 1180 ( 0.00%) 98.33
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2492 ( 0.02%) 274140 ( 0.00%) 110.01
udp6 17449 ( 0.14%) 3352177 ( 0.04%) 192.11
dns 15693 ( 0.12%) 2956326 ( 0.03%) 188.39
starcra 7 ( 0.00%) 923 ( 0.00%) 131.86
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1748 ( 0.01%) 394791 ( 0.00%) 225.85
icmp6 5153 ( 0.04%) 718711 ( 0.01%) 139.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3460 ( 0.03%) 4522352 ( 0.05%) 1307.04
tcpdump file: 200803190230.dump.gz (324.43 MB)