Traffic Trace Info
DumpFile: -
Id: 200803190515
StartTime: Wed Mar 19 05:15:01 2008
EndTime: Wed Mar 19 05:30:00 2008
TotalTime: 899.16 seconds
TotalCapSize: 545.76MB CapLen: 96 bytes
# of packets: 10032553 (5893.89MB)
AvgRate: 54.99Mbps stddev:13.21M
IP flow (unique src/dst pair) Information
# of flows: 696971 (avg. 14.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 5.1% 1.7% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 372317
Top 10 bandwidth usage (bytes/total in %):
12.5% 10.3% 9.3% 8.8% 7.4% 5.2% 4.5% 3.7% 3.6% 2.7%
# of IPv6 addresses: 1985
Top 10 bandwidth usage (bytes/total in %):
48.7% 44.5% 11.7% 9.4% 5.0% 3.7% 3.2% 2.8% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190515.pktlen.png)
detailed numbers
[ 32- 63]: 2106541
[ 64- 127]: 2885019
[ 128- 255]: 784320
[ 256- 511]: 408177
[ 512- 1023]: 123209
[ 1024- 2047]: 3725287
Protocol Breakdown
![[protocol breakdown chart]](200803190515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10032553 (100.00%) 6180186990 (100.00%) 616.01
ip 9998498 ( 99.66%) 6170054784 ( 99.84%) 617.10
tcp 7424342 ( 74.00%) 5542478652 ( 89.68%) 746.53
http(s) 2445384 ( 24.37%) 3357476141 ( 54.33%) 1372.99
http(c) 1250064 ( 12.46%) 138603194 ( 2.24%) 110.88
squid 849165 ( 8.46%) 708576777 ( 11.47%) 834.44
smtp 736955 ( 7.35%) 104180927 ( 1.69%) 141.37
ftp 65202 ( 0.65%) 5887526 ( 0.10%) 90.30
pop3 3404 ( 0.03%) 1811671 ( 0.03%) 532.22
imap 1523 ( 0.02%) 257434 ( 0.00%) 169.03
telnet 3750 ( 0.04%) 241235 ( 0.00%) 64.33
ssh 364219 ( 3.63%) 326980367 ( 5.29%) 897.76
dns 1965 ( 0.02%) 158035 ( 0.00%) 80.42
bgp 206 ( 0.00%) 67225 ( 0.00%) 326.33
napster 23 ( 0.00%) 4629 ( 0.00%) 201.26
rtsp 108 ( 0.00%) 22710 ( 0.00%) 210.28
icecast 256 ( 0.00%) 16856 ( 0.00%) 65.84
other 1702113 ( 16.97%) 898193625 ( 14.53%) 527.69
udp 2115943 ( 21.09%) 584737942 ( 9.46%) 276.35
dns 1245728 ( 12.42%) 181328626 ( 2.93%) 145.56
realaud 8692 ( 0.09%) 5448657 ( 0.09%) 626.86
halflif 23 ( 0.00%) 4468 ( 0.00%) 194.26
starcra 48 ( 0.00%) 9831 ( 0.00%) 204.81
everque 38 ( 0.00%) 7189 ( 0.00%) 189.18
unreal 10 ( 0.00%) 1513 ( 0.00%) 151.30
quake 5 ( 0.00%) 394 ( 0.00%) 78.80
cuseeme 3 ( 0.00%) 2963 ( 0.00%) 987.67
other 861366 ( 8.59%) 397917440 ( 6.44%) 461.96
icmp 446108 ( 4.45%) 41102400 ( 0.67%) 92.14
ipip 334 ( 0.00%) 40524 ( 0.00%) 121.33
ip6 1092 ( 0.01%) 149505 ( 0.00%) 136.91
other 10679 ( 0.11%) 1545761 ( 0.03%) 144.75
frag 1286 ( 0.01%) 1096466 ( 0.02%) 852.62
ip6 34055 ( 0.34%) 10132206 ( 0.16%) 297.52
tcp6 5063 ( 0.05%) 1069278 ( 0.02%) 211.19
http(s) 132 ( 0.00%) 159225 ( 0.00%) 1206.25
http(c) 1723 ( 0.02%) 169526 ( 0.00%) 98.39
smtp 1087 ( 0.01%) 502349 ( 0.01%) 462.14
ftp 34 ( 0.00%) 3146 ( 0.00%) 92.53
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1990 ( 0.02%) 225376 ( 0.00%) 113.25
udp6 20669 ( 0.21%) 3902869 ( 0.06%) 188.83
dns 18594 ( 0.19%) 3365078 ( 0.05%) 180.98
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2074 ( 0.02%) 537654 ( 0.01%) 259.24
icmp6 4868 ( 0.05%) 672371 ( 0.01%) 138.12
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3424 ( 0.03%) 4483472 ( 0.07%) 1309.43
tcpdump file: 200803190515.dump.gz (257.08 MB)