Traffic Trace Info
DumpFile: -
Id: 200803190300
StartTime: Wed Mar 19 03:00:00 2008
EndTime: Wed Mar 19 03:15:00 2008
TotalTime: 899.99 seconds
TotalCapSize: 643.15MB CapLen: 96 bytes
# of packets: 11824581 (7139.24MB)
AvgRate: 70.30Mbps stddev:11.87M
IP flow (unique src/dst pair) Information
# of flows: 757337 (avg. 15.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 4.7% 2.7% 1.3% 1.2% 1.1% 1.0% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 419152
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.0% 8.7% 8.6% 5.8% 4.9% 4.5% 3.2% 2.9% 2.7%
# of IPv6 addresses: 1832
Top 10 bandwidth usage (bytes/total in %):
51.5% 47.3% 6.7% 5.6% 5.3% 3.7% 3.4% 3.1% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190300.pktlen.png)
detailed numbers
[ 32- 63]: 2636550
[ 64- 127]: 3238785
[ 128- 255]: 721358
[ 256- 511]: 496217
[ 512- 1023]: 228623
[ 1024- 2047]: 4503048
Protocol Breakdown
![[protocol breakdown chart]](200803190300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11824581 (100.00%) 7486030956 (100.00%) 633.09
ip 11794180 ( 99.74%) 7476974940 ( 99.88%) 633.95
tcp 9085859 ( 76.84%) 6764925798 ( 90.37%) 744.56
http(s) 2556794 ( 21.62%) 3477471096 ( 46.45%) 1360.09
http(c) 1430664 ( 12.10%) 155303524 ( 2.07%) 108.55
squid 761963 ( 6.44%) 538914511 ( 7.20%) 707.27
smtp 939717 ( 7.95%) 146801221 ( 1.96%) 156.22
ftp 72812 ( 0.62%) 6110724 ( 0.08%) 83.92
pop3 3169 ( 0.03%) 1590495 ( 0.02%) 501.89
imap 58815 ( 0.50%) 5593234 ( 0.07%) 95.10
telnet 2274 ( 0.02%) 146804 ( 0.00%) 64.56
ssh 521326 ( 4.41%) 414913426 ( 5.54%) 795.88
dns 2471 ( 0.02%) 511688 ( 0.01%) 207.08
bgp 171 ( 0.00%) 52422 ( 0.00%) 306.56
realaud 37 ( 0.00%) 4901 ( 0.00%) 132.46
rtsp 268 ( 0.00%) 52155 ( 0.00%) 194.61
icecast 325 ( 0.00%) 21823 ( 0.00%) 67.15
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2735038 ( 23.13%) 2017436874 ( 26.95%) 737.63
udp 2098912 ( 17.75%) 659622364 ( 8.81%) 314.27
dns 1107370 ( 9.36%) 163960197 ( 2.19%) 148.06
realaud 9039 ( 0.08%) 5168763 ( 0.07%) 571.83
halflif 27 ( 0.00%) 2511 ( 0.00%) 93.00
starcra 39 ( 0.00%) 7442 ( 0.00%) 190.82
everque 44 ( 0.00%) 6984 ( 0.00%) 158.73
unreal 18 ( 0.00%) 7896 ( 0.00%) 438.67
quake 5 ( 0.00%) 677 ( 0.00%) 135.40
cuseeme 7 ( 0.00%) 993 ( 0.00%) 141.86
other 982344 ( 8.31%) 490456443 ( 6.55%) 499.27
icmp 601674 ( 5.09%) 51341073 ( 0.69%) 85.33
ipip 344 ( 0.00%) 42358 ( 0.00%) 123.13
ip6 1019 ( 0.01%) 141628 ( 0.00%) 138.99
other 6372 ( 0.05%) 901719 ( 0.01%) 141.51
frag 1475 ( 0.01%) 1224122 ( 0.02%) 829.91
ip6 30399 ( 0.26%) 9055896 ( 0.12%) 297.90
tcp6 4900 ( 0.04%) 1130459 ( 0.02%) 230.71
http(s) 213 ( 0.00%) 221998 ( 0.00%) 1042.24
http(c) 1206 ( 0.01%) 124998 ( 0.00%) 103.65
smtp 1371 ( 0.01%) 532157 ( 0.01%) 388.15
ftp 26 ( 0.00%) 14074 ( 0.00%) 541.31
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 5 ( 0.00%) 462 ( 0.00%) 92.40
dns 10 ( 0.00%) 1087 ( 0.00%) 108.70
bgp 66 ( 0.00%) 7397 ( 0.00%) 112.08
other 1970 ( 0.02%) 225244 ( 0.00%) 114.34
udp6 17431 ( 0.15%) 2988671 ( 0.04%) 171.46
dns 15628 ( 0.13%) 2504097 ( 0.03%) 160.23
other 1803 ( 0.02%) 484574 ( 0.01%) 268.76
icmp6 4766 ( 0.04%) 650536 ( 0.01%) 136.50
pim6 25 ( 0.00%) 3400 ( 0.00%) 136.00
other6 3277 ( 0.03%) 4282830 ( 0.06%) 1306.94
tcpdump file: 200803190300.dump.gz (299.42 MB)