Traffic Trace Info
DumpFile: -
Id: 200803190530
StartTime: Wed Mar 19 05:30:00 2008
EndTime: Wed Mar 19 05:45:00 2008
TotalTime: 900.30 seconds
TotalCapSize: 510.18MB CapLen: 96 bytes
# of packets: 9369712 (5203.55MB)
AvgRate: 48.48Mbps stddev:9.80M
IP flow (unique src/dst pair) Information
# of flows: 656856 (avg. 14.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.4% 1.4% 1.2% 1.1% 1.1% 1.0% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 354143
Top 10 bandwidth usage (bytes/total in %):
13.6% 11.0% 6.9% 5.3% 5.0% 4.7% 4.5% 3.5% 3.4% 3.0%
# of IPv6 addresses: 1960
Top 10 bandwidth usage (bytes/total in %):
48.9% 45.1% 14.0% 11.0% 5.5% 4.2% 3.6% 2.8% 1.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190530.pktlen.png)
detailed numbers
[ 32- 63]: 2087875
[ 64- 127]: 2771703
[ 128- 255]: 734677
[ 256- 511]: 383649
[ 512- 1023]: 132491
[ 1024- 2047]: 3259317
Protocol Breakdown
![[protocol breakdown chart]](200803190530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9369712 (100.00%) 5456320767 (100.00%) 582.34
ip 9334100 ( 99.62%) 5446134592 ( 99.81%) 583.47
tcp 6992301 ( 74.63%) 4866375643 ( 89.19%) 695.96
http(s) 2285540 ( 24.39%) 3118782741 ( 57.16%) 1364.57
http(c) 1273976 ( 13.60%) 121936373 ( 2.23%) 95.71
squid 695290 ( 7.42%) 525119746 ( 9.62%) 755.25
smtp 820289 ( 8.75%) 111998067 ( 2.05%) 136.53
ftp 58204 ( 0.62%) 4755543 ( 0.09%) 81.70
pop3 2990 ( 0.03%) 1068942 ( 0.02%) 357.51
imap 1517 ( 0.02%) 256546 ( 0.00%) 169.11
telnet 2661 ( 0.03%) 170801 ( 0.00%) 64.19
ssh 288368 ( 3.08%) 260222469 ( 4.77%) 902.40
dns 4081 ( 0.04%) 1903356 ( 0.03%) 466.39
bgp 199 ( 0.00%) 60803 ( 0.00%) 305.54
napster 5 ( 0.00%) 302 ( 0.00%) 60.40
realaud 16 ( 0.00%) 1884 ( 0.00%) 117.75
rtsp 89 ( 0.00%) 20356 ( 0.00%) 228.72
icecast 251 ( 0.00%) 16767 ( 0.00%) 66.80
other 1558821 ( 16.64%) 720060707 ( 13.20%) 461.93
udp 1921133 ( 20.50%) 540629793 ( 9.91%) 281.41
dns 1158136 ( 12.36%) 171070700 ( 3.14%) 147.71
realaud 8698 ( 0.09%) 5453105 ( 0.10%) 626.94
halflif 12 ( 0.00%) 1187 ( 0.00%) 98.92
starcra 19 ( 0.00%) 3304 ( 0.00%) 173.89
everque 31 ( 0.00%) 4933 ( 0.00%) 159.13
unreal 25 ( 0.00%) 6364 ( 0.00%) 254.56
quake 8 ( 0.00%) 649 ( 0.00%) 81.12
cuseeme 4 ( 0.00%) 553 ( 0.00%) 138.25
other 754178 ( 8.05%) 364076267 ( 6.67%) 482.75
icmp 409360 ( 4.37%) 37511052 ( 0.69%) 91.63
ipip 351 ( 0.00%) 45054 ( 0.00%) 128.36
ip6 1065 ( 0.01%) 149802 ( 0.00%) 140.66
other 9890 ( 0.11%) 1423248 ( 0.03%) 143.91
frag 1287 ( 0.01%) 1097589 ( 0.02%) 852.83
ip6 35612 ( 0.38%) 10186175 ( 0.19%) 286.03
tcp6 4679 ( 0.05%) 905177 ( 0.02%) 193.46
http(s) 207 ( 0.00%) 256692 ( 0.00%) 1240.06
http(c) 1566 ( 0.02%) 153189 ( 0.00%) 97.82
smtp 562 ( 0.01%) 232229 ( 0.00%) 413.22
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 65 ( 0.00%) 6965 ( 0.00%) 107.15
other 2241 ( 0.02%) 252516 ( 0.00%) 112.68
udp6 22115 ( 0.24%) 3960616 ( 0.07%) 179.09
dns 20036 ( 0.21%) 3389869 ( 0.06%) 169.19
other 2079 ( 0.02%) 570747 ( 0.01%) 274.53
icmp6 5293 ( 0.06%) 742949 ( 0.01%) 140.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3495 ( 0.04%) 4573353 ( 0.08%) 1308.54
tcpdump file: 200803190530.dump.gz (243.62 MB)