Traffic Trace Info
DumpFile: -
Id: 200803190245
StartTime: Wed Mar 19 02:45:01 2008
EndTime: Wed Mar 19 03:00:00 2008
TotalTime: 899.62 seconds
TotalCapSize: 718.21MB CapLen: 96 bytes
# of packets: 12951160 (8045.90MB)
AvgRate: 75.03Mbps stddev:9.10M
IP flow (unique src/dst pair) Information
# of flows: 702285 (avg. 18.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.6% 4.6% 2.9% 2.6% 1.3% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 377372
Top 10 bandwidth usage (bytes/total in %):
20.4% 15.1% 8.8% 8.3% 5.8% 4.8% 4.7% 3.6% 3.0% 2.7%
# of IPv6 addresses: 1776
Top 10 bandwidth usage (bytes/total in %):
53.4% 49.3% 11.0% 9.0% 4.6% 3.6% 3.1% 3.0% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190245.pktlen.png)
detailed numbers
[ 32- 63]: 2626129
[ 64- 127]: 3782439
[ 128- 255]: 742990
[ 256- 511]: 430703
[ 512- 1023]: 230686
[ 1024- 2047]: 5138213
Protocol Breakdown
![[protocol breakdown chart]](200803190245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12951160 (100.00%) 8436742238 (100.00%) 651.43
ip 12920359 ( 99.76%) 8427797141 ( 99.89%) 652.29
tcp 10225432 ( 78.95%) 7754132026 ( 91.91%) 758.32
http(s) 2976162 ( 22.98%) 4096004881 ( 48.55%) 1376.27
http(c) 1633686 ( 12.61%) 170627688 ( 2.02%) 104.44
squid 640919 ( 4.95%) 407850432 ( 4.83%) 636.35
smtp 1059753 ( 8.18%) 175351300 ( 2.08%) 165.46
ftp 69888 ( 0.54%) 5866660 ( 0.07%) 83.94
pop3 4125 ( 0.03%) 1932581 ( 0.02%) 468.50
imap 2560 ( 0.02%) 556210 ( 0.01%) 217.27
telnet 3056 ( 0.02%) 197055 ( 0.00%) 64.48
ssh 499269 ( 3.86%) 417137773 ( 4.94%) 835.50
dns 3682 ( 0.03%) 1351588 ( 0.02%) 367.08
bgp 200 ( 0.00%) 57888 ( 0.00%) 289.44
realaud 48 ( 0.00%) 5899 ( 0.00%) 122.90
rtsp 162 ( 0.00%) 36353 ( 0.00%) 224.40
icecast 280 ( 0.00%) 18950 ( 0.00%) 67.68
other 3331641 ( 25.72%) 2477136708 ( 29.36%) 743.52
udp 2018035 ( 15.58%) 615843301 ( 7.30%) 305.17
dns 1057529 ( 8.17%) 159638721 ( 1.89%) 150.95
realaud 9039 ( 0.07%) 5469322 ( 0.06%) 605.08
halflif 24 ( 0.00%) 2722 ( 0.00%) 113.42
starcra 32 ( 0.00%) 6024 ( 0.00%) 188.25
everque 23 ( 0.00%) 3897 ( 0.00%) 169.43
unreal 69 ( 0.00%) 6459 ( 0.00%) 93.61
quake 13 ( 0.00%) 902 ( 0.00%) 69.38
cuseeme 4 ( 0.00%) 544 ( 0.00%) 136.00
other 951275 ( 7.35%) 450700538 ( 5.34%) 473.79
icmp 668293 ( 5.16%) 56601601 ( 0.67%) 84.70
ipip 320 ( 0.00%) 40772 ( 0.00%) 127.41
ip6 1063 ( 0.01%) 144541 ( 0.00%) 135.97
other 7216 ( 0.06%) 1034900 ( 0.01%) 143.42
frag 1749 ( 0.01%) 1461415 ( 0.02%) 835.57
ip6 30801 ( 0.24%) 8945097 ( 0.11%) 290.42
tcp6 3868 ( 0.03%) 517567 ( 0.01%) 133.81
http(s) 3 ( 0.00%) 440 ( 0.00%) 146.67
http(c) 1185 ( 0.01%) 114765 ( 0.00%) 96.85
smtp 452 ( 0.00%) 137725 ( 0.00%) 304.70
pop3 49 ( 0.00%) 4458 ( 0.00%) 90.98
ssh 5 ( 0.00%) 418 ( 0.00%) 83.60
dns 25 ( 0.00%) 12169 ( 0.00%) 486.76
bgp 79 ( 0.00%) 9995 ( 0.00%) 126.52
other 2070 ( 0.02%) 237597 ( 0.00%) 114.78
udp6 18787 ( 0.15%) 3382278 ( 0.04%) 180.03
dns 17013 ( 0.13%) 2942527 ( 0.03%) 172.96
other 1774 ( 0.01%) 439751 ( 0.01%) 247.89
icmp6 4730 ( 0.04%) 635568 ( 0.01%) 134.37
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3386 ( 0.03%) 4405604 ( 0.05%) 1301.12
tcpdump file: 200803190245.dump.gz (327.82 MB)