Traffic Trace Info
DumpFile: -
Id: 200803190400
StartTime: Wed Mar 19 04:00:01 2008
EndTime: Wed Mar 19 04:15:00 2008
TotalTime: 899.56 seconds
TotalCapSize: 621.85MB CapLen: 96 bytes
# of packets: 11455159 (7229.66MB)
AvgRate: 67.43Mbps stddev:16.31M
IP flow (unique src/dst pair) Information
# of flows: 649057 (avg. 17.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.2% 5.4% 1.7% 1.2% 1.2% 1.2% 0.9% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 338408
Top 10 bandwidth usage (bytes/total in %):
21.6% 21.6% 10.8% 9.8% 7.5% 5.5% 2.8% 2.5% 2.4% 2.3%
# of IPv6 addresses: 1925
Top 10 bandwidth usage (bytes/total in %):
52.1% 47.9% 8.3% 7.0% 4.5% 4.4% 3.6% 3.0% 2.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190400.pktlen.png)
detailed numbers
[ 32- 63]: 2628522
[ 64- 127]: 2762444
[ 128- 255]: 761683
[ 256- 511]: 447252
[ 512- 1023]: 334727
[ 1024- 2047]: 4520531
Protocol Breakdown
![[protocol breakdown chart]](200803190400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11455159 (100.00%) 7580843183 (100.00%) 661.78
ip 11421070 ( 99.70%) 7571346866 ( 99.87%) 662.93
tcp 9097747 ( 79.42%) 7022082921 ( 92.63%) 771.85
http(s) 3432976 ( 29.97%) 4644746902 ( 61.27%) 1352.98
http(c) 1604810 ( 14.01%) 160069783 ( 2.11%) 99.74
squid 721252 ( 6.30%) 569568949 ( 7.51%) 789.69
smtp 902736 ( 7.88%) 145830772 ( 1.92%) 161.54
ftp 60193 ( 0.53%) 5397220 ( 0.07%) 89.67
pop3 3330 ( 0.03%) 1676090 ( 0.02%) 503.33
imap 2342 ( 0.02%) 519247 ( 0.01%) 221.71
telnet 2164 ( 0.02%) 138981 ( 0.00%) 64.22
ssh 450882 ( 3.94%) 423586143 ( 5.59%) 939.46
dns 2547 ( 0.02%) 209340 ( 0.00%) 82.19
bgp 199 ( 0.00%) 49396 ( 0.00%) 248.22
napster 38 ( 0.00%) 2877 ( 0.00%) 75.71
realaud 15 ( 0.00%) 1861 ( 0.00%) 124.07
rtsp 193 ( 0.00%) 34369 ( 0.00%) 178.08
icecast 344 ( 0.00%) 35440 ( 0.00%) 103.02
other 1913720 ( 16.71%) 1070215191 ( 14.12%) 559.23
udp 1899839 ( 16.59%) 509631237 ( 6.72%) 268.25
dns 1133800 ( 9.90%) 176675633 ( 2.33%) 155.83
realaud 9607 ( 0.08%) 5505637 ( 0.07%) 573.09
halflif 17 ( 0.00%) 2543 ( 0.00%) 149.59
starcra 43 ( 0.00%) 8676 ( 0.00%) 201.77
everque 30 ( 0.00%) 5344 ( 0.00%) 178.13
unreal 19 ( 0.00%) 2738 ( 0.00%) 144.11
quake 7 ( 0.00%) 902 ( 0.00%) 128.86
cuseeme 3 ( 0.00%) 241 ( 0.00%) 80.33
other 756074 ( 6.60%) 327380430 ( 4.32%) 433.00
icmp 410673 ( 3.59%) 37623432 ( 0.50%) 91.61
ipip 346 ( 0.00%) 43228 ( 0.00%) 124.94
ip6 1104 ( 0.01%) 156248 ( 0.00%) 141.53
other 11361 ( 0.10%) 1809800 ( 0.02%) 159.30
frag 3609 ( 0.03%) 2891556 ( 0.04%) 801.21
ip6 34089 ( 0.30%) 9496317 ( 0.13%) 278.57
tcp6 4599 ( 0.04%) 634849 ( 0.01%) 138.04
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1557 ( 0.01%) 153813 ( 0.00%) 98.79
smtp 717 ( 0.01%) 220750 ( 0.00%) 307.88
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
bgp 78 ( 0.00%) 8690 ( 0.00%) 111.41
other 2208 ( 0.02%) 247844 ( 0.00%) 112.25
udp6 20690 ( 0.18%) 3592374 ( 0.05%) 173.63
dns 18936 ( 0.17%) 3159123 ( 0.04%) 166.83
everque 1 ( 0.00%) 552 ( 0.00%) 552.00
other 1753 ( 0.02%) 432699 ( 0.01%) 246.83
icmp6 5295 ( 0.05%) 720943 ( 0.01%) 136.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3475 ( 0.03%) 4544071 ( 0.06%) 1307.65
tcpdump file: 200803190400.dump.gz (287.12 MB)