Traffic Trace Info
DumpFile: -
Id: 200803190330
StartTime: Wed Mar 19 03:30:01 2008
EndTime: Wed Mar 19 03:45:00 2008
TotalTime: 899.91 seconds
TotalCapSize: 633.72MB CapLen: 96 bytes
# of packets: 11664696 (6813.64MB)
AvgRate: 63.53Mbps stddev:10.69M
IP flow (unique src/dst pair) Information
# of flows: 801721 (avg. 14.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 5.5% 1.9% 1.4% 1.3% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 435129
Top 10 bandwidth usage (bytes/total in %):
15.0% 11.0% 10.2% 9.6% 7.3% 5.6% 3.8% 3.0% 2.7% 2.2%
# of IPv6 addresses: 1710
Top 10 bandwidth usage (bytes/total in %):
52.1% 48.1% 5.7% 5.0% 3.7% 3.3% 3.2% 3.1% 3.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190330.pktlen.png)
detailed numbers
[ 32- 63]: 2647207
[ 64- 127]: 3299193
[ 128- 255]: 746498
[ 256- 511]: 453078
[ 512- 1023]: 207248
[ 1024- 2047]: 4311472
Protocol Breakdown
![[protocol breakdown chart]](200803190330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11664696 (100.00%) 7144622709 (100.00%) 612.50
ip 11633676 ( 99.73%) 7135122453 ( 99.87%) 613.32
tcp 8717992 ( 74.74%) 6368122548 ( 89.13%) 730.46
http(s) 2336812 ( 20.03%) 3158209888 ( 44.20%) 1351.50
http(c) 1358759 ( 11.65%) 145480703 ( 2.04%) 107.07
squid 844894 ( 7.24%) 609792845 ( 8.53%) 721.74
smtp 967638 ( 8.30%) 138945879 ( 1.94%) 143.59
ftp 72002 ( 0.62%) 12330146 ( 0.17%) 171.25
pop3 3892 ( 0.03%) 1590670 ( 0.02%) 408.70
imap 2196 ( 0.02%) 480104 ( 0.01%) 218.63
telnet 1673 ( 0.01%) 107414 ( 0.00%) 64.20
ssh 553909 ( 4.75%) 458153968 ( 6.41%) 827.13
dns 3725 ( 0.03%) 1883793 ( 0.03%) 505.72
bgp 196 ( 0.00%) 58732 ( 0.00%) 299.65
realaud 26 ( 0.00%) 2669 ( 0.00%) 102.65
rtsp 96 ( 0.00%) 21939 ( 0.00%) 228.53
icecast 335 ( 0.00%) 22745 ( 0.00%) 67.90
other 2571831 ( 22.05%) 1841040573 ( 25.77%) 715.85
udp 2229896 ( 19.12%) 708732368 ( 9.92%) 317.83
dns 1124776 ( 9.64%) 167939778 ( 2.35%) 149.31
realaud 8699 ( 0.07%) 5453473 ( 0.08%) 626.91
halflif 22 ( 0.00%) 2270 ( 0.00%) 103.18
starcra 26 ( 0.00%) 5620 ( 0.00%) 216.15
everque 20 ( 0.00%) 3724 ( 0.00%) 186.20
unreal 17 ( 0.00%) 2145 ( 0.00%) 126.18
quake 12 ( 0.00%) 1163 ( 0.00%) 96.92
cuseeme 5 ( 0.00%) 862 ( 0.00%) 172.40
other 1096299 ( 9.40%) 535305990 ( 7.49%) 488.28
icmp 677086 ( 5.80%) 57046046 ( 0.80%) 84.25
ipip 338 ( 0.00%) 41622 ( 0.00%) 123.14
ip6 1012 ( 0.01%) 136839 ( 0.00%) 135.22
other 7352 ( 0.06%) 1043030 ( 0.01%) 141.87
frag 1586 ( 0.01%) 1338649 ( 0.02%) 844.04
ip6 31020 ( 0.27%) 9500256 ( 0.13%) 306.26
tcp6 4710 ( 0.04%) 955525 ( 0.01%) 202.87
http(s) 571 ( 0.00%) 349568 ( 0.00%) 612.20
http(c) 1309 ( 0.01%) 131012 ( 0.00%) 100.09
smtp 639 ( 0.01%) 224021 ( 0.00%) 350.58
ftp 5 ( 0.00%) 475 ( 0.00%) 95.00
pop3 35 ( 0.00%) 3258 ( 0.00%) 93.09
dns 19 ( 0.00%) 2095 ( 0.00%) 110.26
bgp 66 ( 0.00%) 8182 ( 0.00%) 123.97
other 2066 ( 0.02%) 236914 ( 0.00%) 114.67
udp6 17463 ( 0.15%) 3238147 ( 0.05%) 185.43
dns 15983 ( 0.14%) 2903775 ( 0.04%) 181.68
other 1480 ( 0.01%) 334372 ( 0.00%) 225.93
icmp6 5324 ( 0.05%) 735442 ( 0.01%) 138.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3493 ( 0.03%) 4567062 ( 0.06%) 1307.49
tcpdump file: 200803190330.dump.gz (297.48 MB)