Traffic Trace Info
DumpFile: -
Id: 200803190500
StartTime: Wed Mar 19 05:00:00 2008
EndTime: Wed Mar 19 05:15:01 2008
TotalTime: 900.81 seconds
TotalCapSize: 560.70MB CapLen: 96 bytes
# of packets: 10303795 (5406.53MB)
AvgRate: 50.33Mbps stddev:9.96M
IP flow (unique src/dst pair) Information
# of flows: 700203 (avg. 14.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.4% 1.9% 1.2% 1.1% 1.1% 1.1% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 380685
Top 10 bandwidth usage (bytes/total in %):
13.1% 11.8% 10.2% 6.7% 5.0% 4.7% 3.0% 2.9% 2.8% 2.5%
# of IPv6 addresses: 1707
Top 10 bandwidth usage (bytes/total in %):
55.4% 50.7% 5.1% 4.6% 3.7% 3.3% 2.8% 2.7% 2.7% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190500.pktlen.png)
detailed numbers
[ 32- 63]: 2346417
[ 64- 127]: 3130293
[ 128- 255]: 900947
[ 256- 511]: 444025
[ 512- 1023]: 136498
[ 1024- 2047]: 3345615
Protocol Breakdown
![[protocol breakdown chart]](200803190500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10303795 (100.00%) 5669155044 (100.00%) 550.20
ip 10274596 ( 99.72%) 5660384397 ( 99.85%) 550.91
tcp 7023029 ( 68.16%) 4962278961 ( 87.53%) 706.57
http(s) 2181309 ( 21.17%) 2958293948 ( 52.18%) 1356.20
http(c) 1187882 ( 11.53%) 133355893 ( 2.35%) 112.26
squid 652645 ( 6.33%) 439666699 ( 7.76%) 673.67
smtp 798613 ( 7.75%) 137052049 ( 2.42%) 171.61
ftp 75671 ( 0.73%) 6283775 ( 0.11%) 83.04
pop3 3814 ( 0.04%) 2240807 ( 0.04%) 587.52
imap 1986 ( 0.02%) 451607 ( 0.01%) 227.40
telnet 3523 ( 0.03%) 226054 ( 0.00%) 64.17
ssh 437490 ( 4.25%) 384824460 ( 6.79%) 879.62
dns 2505 ( 0.02%) 199156 ( 0.00%) 79.50
bgp 214 ( 0.00%) 65095 ( 0.00%) 304.18
napster 8 ( 0.00%) 538 ( 0.00%) 67.25
realaud 4 ( 0.00%) 633 ( 0.00%) 158.25
rtsp 99 ( 0.00%) 29454 ( 0.00%) 297.52
icecast 240 ( 0.00%) 16386 ( 0.00%) 68.28
other 1677025 ( 16.28%) 899572347 ( 15.87%) 536.41
udp 2724012 ( 26.44%) 647290710 ( 11.42%) 237.62
dns 1477485 ( 14.34%) 209958073 ( 3.70%) 142.11
realaud 8698 ( 0.08%) 5456665 ( 0.10%) 627.35
halflif 17 ( 0.00%) 1187 ( 0.00%) 69.82
starcra 19 ( 0.00%) 3913 ( 0.00%) 205.95
everque 51 ( 0.00%) 7817 ( 0.00%) 153.27
unreal 13 ( 0.00%) 2177 ( 0.00%) 167.46
quake 9 ( 0.00%) 720 ( 0.00%) 80.00
cuseeme 3 ( 0.00%) 234 ( 0.00%) 78.00
other 1237688 ( 12.01%) 431850943 ( 7.62%) 348.92
icmp 515275 ( 5.00%) 49043900 ( 0.87%) 95.18
ipip 349 ( 0.00%) 45326 ( 0.00%) 129.87
ip6 1054 ( 0.01%) 146934 ( 0.00%) 139.41
other 10877 ( 0.11%) 1578566 ( 0.03%) 145.13
frag 1587 ( 0.02%) 1309934 ( 0.02%) 825.42
ip6 29199 ( 0.28%) 8770647 ( 0.15%) 300.37
tcp6 4452 ( 0.04%) 757329 ( 0.01%) 170.11
http(s) 180 ( 0.00%) 212259 ( 0.00%) 1179.22
http(c) 1476 ( 0.01%) 146548 ( 0.00%) 99.29
smtp 475 ( 0.00%) 135511 ( 0.00%) 285.29
pop3 59 ( 0.00%) 5380 ( 0.00%) 91.19
dns 12 ( 0.00%) 1179 ( 0.00%) 98.25
bgp 65 ( 0.00%) 7534 ( 0.00%) 115.91
other 2185 ( 0.02%) 248918 ( 0.00%) 113.92
udp6 15890 ( 0.15%) 2844703 ( 0.05%) 179.02
dns 14286 ( 0.14%) 2518204 ( 0.04%) 176.27
other 1604 ( 0.02%) 326499 ( 0.01%) 203.55
icmp6 5413 ( 0.05%) 719609 ( 0.01%) 132.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3414 ( 0.03%) 4444926 ( 0.08%) 1301.97
tcpdump file: 200803190500.dump.gz (263.28 MB)