Traffic Trace Info
DumpFile: -
Id: 200803190415
StartTime: Wed Mar 19 04:15:00 2008
EndTime: Wed Mar 19 04:30:00 2008
TotalTime: 899.66 seconds
TotalCapSize: 591.11MB CapLen: 96 bytes
# of packets: 10902025 (6649.23MB)
AvgRate: 62.44Mbps stddev:12.60M
IP flow (unique src/dst pair) Information
# of flows: 651804 (avg. 16.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.1% 5.9% 1.8% 0.9% 0.9% 0.8% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 355350
Top 10 bandwidth usage (bytes/total in %):
16.4% 16.4% 13.1% 10.2% 7.9% 6.0% 3.6% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1829
Top 10 bandwidth usage (bytes/total in %):
51.7% 47.4% 7.0% 5.8% 5.3% 4.3% 3.2% 3.1% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190415.pktlen.png)
detailed numbers
[ 32- 63]: 2381429
[ 64- 127]: 2811555
[ 128- 255]: 776380
[ 256- 511]: 488523
[ 512- 1023]: 316554
[ 1024- 2047]: 4127584
Protocol Breakdown
![[protocol breakdown chart]](200803190415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10902025 (100.00%) 6972218431 (100.00%) 639.53
ip 10870543 ( 99.71%) 6962694523 ( 99.86%) 640.51
tcp 8374686 ( 76.82%) 6330494391 ( 90.80%) 755.91
http(s) 3050098 ( 27.98%) 4121677479 ( 59.12%) 1351.33
http(c) 1465216 ( 13.44%) 146760942 ( 2.10%) 100.16
squid 776512 ( 7.12%) 606568623 ( 8.70%) 781.15
smtp 889520 ( 8.16%) 133247520 ( 1.91%) 149.80
ftp 50730 ( 0.47%) 4237900 ( 0.06%) 83.54
pop3 3698 ( 0.03%) 1739828 ( 0.02%) 470.48
imap 1890 ( 0.02%) 434362 ( 0.01%) 229.82
telnet 2265 ( 0.02%) 145463 ( 0.00%) 64.22
ssh 454200 ( 4.17%) 424812224 ( 6.09%) 935.30
dns 9031 ( 0.08%) 10474100 ( 0.15%) 1159.79
bgp 201 ( 0.00%) 60927 ( 0.00%) 303.12
napster 14 ( 0.00%) 840 ( 0.00%) 60.00
realaud 15 ( 0.00%) 2720 ( 0.00%) 181.33
rtsp 228 ( 0.00%) 41772 ( 0.00%) 183.21
icecast 215 ( 0.00%) 14485 ( 0.00%) 67.37
hotline 6 ( 0.00%) 410 ( 0.00%) 68.33
other 1670844 ( 15.33%) 880274616 ( 12.63%) 526.84
udp 2149245 ( 19.71%) 598334333 ( 8.58%) 278.39
dns 1272384 ( 11.67%) 196035076 ( 2.81%) 154.07
realaud 9508 ( 0.09%) 5445070 ( 0.08%) 572.68
halflif 30 ( 0.00%) 4654 ( 0.00%) 155.13
starcra 45 ( 0.00%) 9463 ( 0.00%) 210.29
everque 28 ( 0.00%) 3933 ( 0.00%) 140.46
unreal 12 ( 0.00%) 2773 ( 0.00%) 231.08
quake 9 ( 0.00%) 785 ( 0.00%) 87.22
cuseeme 5 ( 0.00%) 612 ( 0.00%) 122.40
other 867183 ( 7.95%) 396804753 ( 5.69%) 457.58
icmp 333990 ( 3.06%) 31970403 ( 0.46%) 95.72
ipip 335 ( 0.00%) 41018 ( 0.00%) 122.44
ip6 1045 ( 0.01%) 142197 ( 0.00%) 136.07
other 11242 ( 0.10%) 1712181 ( 0.02%) 152.30
frag 1511 ( 0.01%) 1308102 ( 0.02%) 865.72
ip6 31482 ( 0.29%) 9523908 ( 0.14%) 302.52
tcp6 4553 ( 0.04%) 843690 ( 0.01%) 185.30
http(c) 1494 ( 0.01%) 150954 ( 0.00%) 101.04
smtp 926 ( 0.01%) 448789 ( 0.01%) 484.65
pop3 29 ( 0.00%) 2698 ( 0.00%) 93.03
dns 17 ( 0.00%) 1662 ( 0.00%) 97.76
bgp 62 ( 0.00%) 6521 ( 0.00%) 105.18
other 2025 ( 0.02%) 233066 ( 0.00%) 115.09
udp6 18598 ( 0.17%) 3503738 ( 0.05%) 188.39
dns 16702 ( 0.15%) 2987883 ( 0.04%) 178.89
other 1896 ( 0.02%) 515855 ( 0.01%) 272.08
icmp6 4856 ( 0.04%) 664786 ( 0.01%) 136.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3445 ( 0.03%) 4507614 ( 0.06%) 1308.45
tcpdump file: 200803190415.dump.gz (276.06 MB)